Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Linear Asset Management). Supported versions that are affected are 12.2.3-12.2.15. Easily explo…

High CVSS 7.6

CVECVE-2026-61296

First seen2026-08-21 16:31 UTC

Disclosed2026-08-18 21:16 UTC

Last updated2026-08-21 16:31 UTC

Channel statusauto

Summary

Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Linear Asset Management). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise Asset Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Enterprise Asset Management, attacks may sig…

In-depth triage

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Sources

NVD DATABASE

Original Links

https://www.oracle.com/security-alerts/cspuaug2026.html

Timeline

2026-08-21 nvd_ingest NVD