Vulnerability in Oracle Process Manufacturing Product Development
CVE-2026-61289
Vulnerability in the Oracle Process Manufacturing Product Development product of Oracle E-Business Suite (component: Quality Management Specs). The supported version that is affected is 12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Process Manufacturing Product Development. Successful attacks of this vulnerability can result in takeover of Oracle Process Manufacturing Product Development. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
EPSS: 0.004 (36.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Oracle Process_manufacturing_product_development — versions 12.2.15
- Oracle Corporation Process Manufacturing Product Development — versions 12.2.15
Weakness classification (CWE)
References
- secalert_us@oracle.com (vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2026-61289?
- CVE-2026-61289 is a high-severity vulnerability in Oracle Process Manufacturing Product Development, classified under Improper Access Control. CVSS score: 8.8/10. Published 2026-07-21.
- How severe is CVE-2026-61289?
- High severity. CVSS v3 base score is 8.8 out of 10.