Vulnerability in Oracle Enterprise Asset Management Affects Multiple Versions
CVE-2026-61296

7.6HIGH

Key Information:

Vendor

Oracle
Status
Oracle Enterprise Asset Management
Vendor
CVE Published:
18 August 2026

What is CVE-2026-61296?

A vulnerability in Oracle's Enterprise Asset Management allows a low-privileged attacker with network access through HTTP to potentially compromise sensitive data. Although the vulnerability resides in the Oracle Enterprise Asset Management system, attacks may affect other linked products as well. Successful exploitation necessitates user interaction, leading to significant risks including unauthorized access and potential alterations of critical data within the management system.

Affected Version(s)

Oracle Enterprise Asset Management 12.2.3 <= 12.2.15

References

https://www.oracle.com/security-alerts/cspuaug2026.html
vendor-advisory

CVSS V3.1

Score:
7.6
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.