Vulnerability in Oracle E-Business Suite Secure Enterprise Search Product
CVE-2026-61218

8.1HIGH

Key Information:

Vendor

Oracle
Status
Oracle E-business Suite Secure Enterprise Search
Vendor
CVE Published:
21 July 2026

What is CVE-2026-61218?

A security vulnerability exists in the Oracle E-Business Suite Secure Enterprise Search component, allowing a low-privileged attacker with network access to utilize HTTP methods to compromise the system. Successful exploitation may permit unauthorized creation, deletion, or modification of critical data within the application. Furthermore, attackers could gain unauthorized access to all data accessible through Oracle E-Business Suite Secure Enterprise Search, posing serious risks to confidentiality and integrity.

Affected Version(s)

Oracle E-Business Suite Secure Enterprise Search 12.2.3 <= 12.2.15

References

https://www.oracle.com/security-alerts/cpujul2026.html
vendor-advisory

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.