7.7
High
CVE-2026-61324 Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Internal Operations)
Description
Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Internal Operations). The supported version that is affected is 12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced Benefits. While the vulnerability is in Oracle Advanced Benefits, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Advanced Benefits accessible data. CVSS 3.1 Base Score 7.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Oracle Advanced Benefits | 12.2.15 | No fix stated |
References
- Oracle Advisory www.oracle.com
Timeline
- Published
- Last modified
Other CVEs of Oracle Advanced Benefits
The 7 CVEs of Oracle Advanced Benefits →
CVE-2026-83483
Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Self-serv What-if Analysis)
8.0
High
CVE-2026-62542
Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Self Service Benefits)
6.3
Medium
CVE-2026-61325
Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Internal Operations)
7.6
High
CVE-2026-61323
Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Internal Operations)
6.5
Medium