CVE-2026-61331

HighCVSS 7.7

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

19th percentile - higher than 19% of all known CVEs

Summary

Vulnerability in Oracle Financials Common Modules (component: Common Components) in versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can compromise the system. The attack may impact other products (scope change) and lead to unauthorized access to critical data.

Risk Assessment

Risk includes breach of confidentiality, including full access to Oracle Financials data. CVSS score 7.7 indicates significant threat.

Recommendation

Apply Oracle patches for versions 12.2.3-12.2.15. Restrict network access to the system and monitor activities of low-privileged users.

Original NVD description (English source)

Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financials Common Modules. While the vulnerability is in Oracle Financials Common Modules, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Financials Common Modules accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).