Threat Intelligence Database

Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Production Scheduling. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Production Scheduling accessible data as well as unauthorized read access to a subset of Oracle Production Scheduling accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Production Scheduling. CVSS 3.1 Base Score 7.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L).

Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Production Scheduling. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Production Scheduling accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N).

CVE-2026-61050 is a vulnerability in Oracle Production Scheduling, part of the Oracle E-Business Suite User Interface component. It affects versions from 12.2.3 through 12.2.15. The vulnerability is difficult to exploit and requires a low privileged attacker with network access via HTTP. Successful exploitation can lead to unauthorized access to critical or all accessible data within Oracle Production Scheduling. The CVSS 3.1 base score is 5.3, indicating a medium severity with a high confidentiality impact but no integrity or availability impact. Oracle has included this vulnerability in its July 2026 Critical Patch Update advisory, but no explicit patch or remediation details are provided in the advisory content for this specific vulnerability.

CVE-2026-61049 is a high-severity vulnerability in Oracle Production Scheduling (part of Oracle E-Business Suite) versions 12.2.3 through 12.2.15. It allows an unauthenticated attacker with physical access to the communication segment attached to the hardware running Oracle Production Scheduling to potentially take over the product. Successful exploitation requires human interaction from a person other than the attacker. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 7.1.

CVE-2026-61046 is a vulnerability in Oracle Production Scheduling (part of Oracle E-Business Suite) versions 12.2.3 through 12.2.15. It allows a high privileged attacker with network access via HTTP to compromise the product, potentially impacting additional Oracle products. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data and unauthorized read access to some data. The vulnerability has a CVSS 3.1 base score of 6.6, indicating medium severity.

CVE-2026-61044 is a medium severity vulnerability in Oracle Production Scheduling (part of Oracle E-Business Suite) versions 12.2.3 through 12.2.15. It allows a high privileged attacker with network access via HTTP to perform unauthorized read, update, insert, or delete operations on accessible data and cause a partial denial of service. The CVSS 3.1 base score is 4.7, reflecting low confidentiality, integrity, and availability impacts. Oracle has published a Critical Patch Update advisory including this vulnerability but does not explicitly confirm patch availability or remediation status for this specific issue. No known exploits in the wild have been reported.

CVE-2026-61043 is a vulnerability in Oracle Production Scheduling versions 12.2.3 through 12.2.15 that allows a low privileged attacker with logon access to the infrastructure to compromise the product. Exploitation requires human interaction from a user other than the attacker and can lead to unauthorized creation, deletion, or modification of critical data, as well as unauthorized read access to some data. The vulnerability affects confidentiality and integrity but not availability. The CVSS 3.1 base score is 6.7, indicating medium severity. Oracle has published a Critical Patch Update advisory referencing multiple patches but does not explicitly confirm a patch for this specific vulnerability in the provided content. Users should consult the Oracle advisory for patch status and remediation guidance.