6.4
Medium
CVE-2026-61023 Vulnerability in the Oracle Inventory Management product of Oracle E-Business Suite (component: Internal Operations)
Description
Vulnerability in the Oracle Inventory Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Inventory Management executes to compromise Oracle Inventory Management. Successful attacks of this vulnerability can result in takeover of Oracle Inventory Management. CVSS 3.1 Base Score 6.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Oracle Inventory Management 12.2 | 12.2.3 → 12.2.15 | No fix stated |
Other CVEs of Oracle Inventory Management
The 5 CVEs of Oracle Inventory Management →
CVE-2026-101545
Vulnerability in the Oracle Inventory Management product of Oracle E-Business Suite (component: Internal Operations)
7.0
High
CVE-2026-61028
Vulnerability in the Oracle Inventory Management product of Oracle E-Business Suite (component: Internal Operations)
1.9
Low
CVE-2026-61014
Vulnerability in the Oracle Inventory Management product of Oracle E-Business Suite (component: Internal Operations)
7.7
High
CVE-2026-60917
Vulnerability in the Oracle Inventory Management product of Oracle E-Business Suite (component: Core Receiving)
8.1
High