← Back

CVE-2026-61026

nvd nist
Published: Jul 21, 2026Modified: Aug 4, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: secalert_us@oracle.com (Secondary)

Description

Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iRecruitment. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle iRecruitment accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

Affected (1)

Products: Oracle: Irecruitment
Oracle
1 product
Irecruitment
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Irecruitment
From 12.2.3 to 12.2.15

Related CWEs

CWE-284
Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (1)

Source: secalert_us@oracle.com
Vendor Advisory

Timeline

No history available yet.