CVE-2026-61127: High severity Oracle Communications Oracle Communications Service Catalog and Design vulnerability
Vulnerability in the Oracle Communications Service Catalog and Design product of Oracle Communications (component: Solution Designer). Supported versions that are affected are 8.0.0.7.0-8.3.0.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Communications Service Catalog and Design. Successful attacks of this vulnerability can result in takeover of Oracle Communications Service Catalog and Design. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-61127?
CVE-2026-61127 has a severity score of 8.8, indicating it's a high-risk vulnerability.
What software is affected by CVE-2026-61127?
CVE-2026-61127 affects the Oracle Communications Service Catalog and Design product, specifically versions 8.0.0.7.0 to 8.3.0.2.0.
How do I fix CVE-2026-61127?
To fix CVE-2026-61127, you should apply the latest security patches released by Oracle for the affected versions.
Can CVE-2026-61127 be exploited remotely?
Yes, CVE-2026-61127 can be easily exploited by a low privileged attacker with network access via HTTP.
What impact does CVE-2026-61127 have on data integrity and availability?
CVE-2026-61127 has a critical impact on confidentiality, integrity, and availability of the affected system.