CVE-2026-61324
HighCVSS 7.7Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
Vulnerability in Oracle Advanced Benefits of Oracle E-Business Suite (component: Internal Operations). Affects version 12.2.15. A low-privileged attacker with network access via HTTP can compromise Oracle Advanced Benefits, potentially impacting additional products (scope change). Successful attacks can lead to unauthorized creation, deletion, or modification of critical data. CVSS 7.7 (Integrity impacts).
Risk Assessment
Risk of unauthorized modification of critical data in Oracle Advanced Benefits and potentially other Oracle products.
Recommendation
Apply the patch provided by Oracle immediately and restrict network access to the vulnerable version.
Other vulnerabilities in Oracle Advanced Benefits
See all- CVE-2026-62542Medium
A vulnerability in Oracle Advanced Benefits (Oracle E-Business Suite) versions 12.2.3-12.2.15 allows a low-privileged attacker with network access via HTTP to gain unauthorized read, update, insert, or delete access to some data and cause a partial denial of service.
- CVE-2026-61325High
Vulnerability in Oracle Advanced Benefits (part of Oracle E-Business Suite) version 12.2.15. An authenticated attacker with high privileges can access critical data and modify some data via HTTP.
- CVE-2026-61141High
Vulnerability in Oracle Advanced Benefits (component: Affordable Care Act) versions 12.2.7-12.2.15. Difficult to exploit, allows a low-privileged attacker via HTTP to compromise the system.
Original NVD description (English source)
Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Internal Operations). The supported version that is affected is 12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced Benefits. While the vulnerability is in Oracle Advanced Benefits, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Advanced Benefits accessible data. CVSS 3.1 Base Score 7.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N).