AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

OracleCVE-2026-61309

Oracle In-Memory Cost Management for Discrete Industries: data exposure via...

Oracle

CVE-2026-61309 · Published Jul 21, 2026 · updated Aug 19, 2026

High7.5
No fix yet
Oracle advisory

Vulnerability in the Oracle In-Memory Cost Management for Discrete Industries product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle In-Memory Cost Management for Discrete Industries. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle In-Memory Cost Management for Discrete Industries accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

Affected versions

PackageAffectedFixed in
Oracle In-Memory Cost Management for Discrete Industries
Product
>= 12.2.3, <= 12.2.15No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-284

More Oracle advisories

All Oracle
High 7.8Jul 21Oracle HRMS (US): takeover via Internal OperationsCVE-2026-62561no fix yetMedium 6.5Jul 21Oracle HRMS (US): data exposure via Internal OperationsCVE-2026-62562no fix yetMedium 5.4Jul 21Oracle Work in Process: data tampering via Internal OperationsCVE-2026-62563no fix yetHigh 7.1Jul 21Oracle HRMS (US): data tampering via US Payroll Year EndCVE-2026-62565no fix yetHigh 7.7Jul 21Oracle HRMS (UK): data exposure via UK PayrollCVE-2026-62567no fix yetHigh 7.8Jul 21Oracle Java SE: takeover via InstallCVE-2026-62574no fix yet