CVE-2026-61262

MediumCVSS 6.5

Published: 21/07/2026(UTC)Updated: 06/08/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

17th percentile - higher than 17% of all known CVEs

Summary

Vulnerability in Oracle Teleservice (Oracle E-Business Suite) versions 12.2.3-12.2.15. An unauthenticated attacker with network access via HTTP can gain unauthorized read, update, insert, and delete access to data.

Risk Assessment

The risk is compromise of confidentiality and integrity of teleservice data, potentially leading to leakage or modification of sensitive information.

Recommendation

Immediately apply the patch from Oracle's Critical Patch Update and restrict network access to the service.

Other vulnerabilities in Oracle Teleservice

CVE-2026-70729High
Vulnerability in Oracle Teleservice (component: Service Request Form) affects versions 12.2.3-12.2.15. A low-privileged attacker can take over Oracle Teleservice over HTTP.

Original NVD description (English source)

Vulnerability in the Oracle Teleservice product of Oracle E-Business Suite (component: Service Diagnostics Scripts). Supported versions that are affected are 12.2.3-12.215. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Teleservice. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Teleservice accessible data as well as unauthorized read access to a subset of Oracle Teleservice accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS