Vulnerability in Oracle E-Business Suite's Application Object Library Component
CVE-2026-61111

6.5MEDIUM

Key Information:

Vendor

Oracle
Status
Oracle Application Object Library
Vendor
CVE Published:
21 July 2026

What is CVE-2026-61111?

A vulnerability exists in the Oracle Application Object Library component of Oracle E-Business Suite, allowing low-privileged attackers who have logged into the environment to potentially compromise the system. By exploiting this flaw, adversaries could gain unauthorized access to sensitive data or complete control over all data accessible through the Oracle Application Object Library. This could lead to significant security risks for users relying on this component within their Oracle E-Business Suite applications.

Affected Version(s)

Oracle Application Object Library 12.2.3 <= 12.2.15

References

https://www.oracle.com/security-alerts/cpujul2026.html
vendor-advisory

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.