CVE-2026-61028: Low severity Oracle Oracle E-Business Suite (Oracle Inventory Management) vulnerability
Vulnerability in the Oracle Inventory Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Inventory Management executes to compromise Oracle Inventory Management. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Inventory Management. CVSS 3.1 Base Score 1.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Oracle E-Business Suite - Oracle Inventory Management (Internal Operations)to a version that resolves this vulnerability.Fixed in 12.2.3-12.2.15
Event History
Frequently Asked Questions
What is the severity of CVE-2026-61028?
The severity of CVE-2026-61028 is categorized as low with a score of 1.9.
How do I fix CVE-2026-61028?
To fix CVE-2026-61028, ensure that you update your Oracle E-Business Suite to a version above 12.2.15.
Who is affected by CVE-2026-61028?
Oracle Inventory Management users running versions 12.2.3 to 12.2.15 are affected by CVE-2026-61028.
What kind of attack can exploit CVE-2026-61028?
CVE-2026-61028 can be exploited by a high privileged attacker with logon access to the infrastructure where Oracle Inventory Management is deployed.
What impact does CVE-2026-61028 have on data?
CVE-2026-61028 has a low impact on data availability, with no impact on confidentiality or integrity.