CVE-2026-61289

HighCVSS 8.8

Published: 21/07/2026(UTC)Updated: 11/08/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.40%

33th percentile - higher than 33% of all known CVEs

Summary

Vulnerability in Oracle Process Manufacturing Product Development (Oracle E-Business Suite) component Quality Management Specs. Version 12.2.15 is affected. A low-privileged attacker with network access via HTTP can compromise this product.

Risk Assessment

Successful attack can lead to full takeover of Oracle Process Manufacturing Product Development, resulting in loss of confidentiality, integrity, and availability.

Recommendation

Apply the patch provided by Oracle for Oracle E-Business Suite version 12.2.15.

Other vulnerabilities in Oracle Process Manufacturing Product Development

CVE-2026-46918Critical
Vulnerability in the Oracle Process Manufacturing Product Development product of Oracle E-Business Suite allows a low privileged attacker with network access via HTTP to take control of this product. Attacks may also significantly impact additional products in the system.

Original NVD description (English source)

Vulnerability in the Oracle Process Manufacturing Product Development product of Oracle E-Business Suite (component: Quality Management Specs). The supported version that is affected is 12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Process Manufacturing Product Development. Successful attacks of this vulnerability can result in takeover of Oracle Process Manufacturing Product Development. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).