CVE-2026-61028
- State
- Published
- Severity
- 1.9 Low
- Published
- Jul 21, 2026
- Updated
- Jul 24, 2026
- Reserved
- Jul 8, 2026
Description
Vulnerability in the Oracle Inventory Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Inventory Management executes to compromise Oracle Inventory Management. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Inventory Management. CVSS 3.1 Base Score 1.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L).
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 1.9 Low | CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L | oracle |
Weaknesses
- CWE-404 Improper Resource Shutdown or Release
Affected Products
| Product | Versions |
|---|---|
Oracle Inventory ManagementOracle Corporation |
|
References
- Oracle Advisoryvendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.