User Interface Vulnerability in Oracle E-Business Suite Production Scheduling
CVE-2026-61050

5.3MEDIUM

Key Information:

Vendor

Oracle
Status
Oracle Production Scheduling
Vendor
CVE Published:
21 July 2026

What is CVE-2026-61050?

A vulnerability exists in the User Interface component of the Oracle Production Scheduling product within the Oracle E-Business Suite. This vulnerability can be exploited by low-privileged attackers with HTTP network access, allowing them to gain unauthorized access to sensitive data. Successful exploitation can lead to a significant compromise of the integrity and confidentiality of data managed by the affected production scheduling systems.

Affected Version(s)

Oracle Production Scheduling 12.2.3 <= 12.2.15

References

https://www.oracle.com/security-alerts/cpujul2026.html
vendor-advisory

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.