CVE-2026-61328: Medium severity Oracle Oracle E-Business Suite - Cost Management (Cost Planning) vulnerability
Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Cost Management. Successful attacks of this vulnerability can result in takeover of Oracle Cost Management. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-61328?
The severity of CVE-2026-61328 is rated medium with a score of 6.6.
How do I fix CVE-2026-61328?
To fix CVE-2026-61328, ensure that your Oracle E-Business Suite is updated to a supported version beyond 12.2.15.
What impact does CVE-2026-61328 have?
CVE-2026-61328 allows high privileged attackers with network access via HTTP to compromise the Oracle Cost Management component.
Which versions of Oracle E-Business Suite are affected by CVE-2026-61328?
The affected versions of Oracle E-Business Suite are 12.2.3 to 12.2.15 of the Cost Management product.
Is CVE-2026-61328 easy to exploit?
CVE-2026-61328 is considered difficult to exploit.