CVE-2026-61261
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
Vulnerability in Oracle Knowledge Management (User Interface component) versions 12.2.3-12.2.15. Low-privileged attacker via HTTP can unauthorizedly read and modify data.
Risk Assessment
Risk of knowledge base leakage or modification, potentially affecting support information integrity.
Recommendation
Update Oracle E-Business Suite to the latest version and restrict access to the user interface.
Other vulnerabilities in Oracle Knowledge Management
See all- CVE-2017-10412High
Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires user interaction, which may lead to unauthorized access to critical data.
- CVE-2017-10411High
A vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a person other than the attacker, increasing the risk for the organization.
- CVE-2017-10410High
A vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a person other than the attacker, increasing the risk of unauthorized access to critical data.
- CVE-2017-3367High
Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, which may lead to unauthorized access to critical data.
- CVE-2017-3366High
Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, potentially leading to unauthorized access to critical data.
- CVE-2017-3365High
Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, potentially leading to unauthorized access to critical data.
- CVE-2017-3364High
Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, which may lead to unauthorized access to critical data.
- CVE-2017-3363High
Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, increasing the risk for the organization.
- CVE-2017-3362High
A vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite allows unauthenticated attackers with network access via HTTP to compromise the system. It requires interaction from a third party, which may lead to unauthorized access to critical data.
- CVE-2026-60842Medium
Vulnerability in Oracle Knowledge Management (Search) versions 12.2.5-12.2.15. An unauthenticated attacker via HTTP, requiring user interaction, can compromise data and affect other products.
Original NVD description (English source)
Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Knowledge Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Knowledge Management accessible data as well as unauthorized read access to a subset of Oracle Knowledge Management accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).