中文

// CVE · PUBLISHED 2026-07-21

CVE-2026-61041

Oracle Corporation / Oracle Demantra Demand Management

9.9 · CVSS 3.1Critical

Description

Vulnerability in the Oracle Demantra Demand Management product of Oracle Supply Chain (component: Product Security). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Demantra Demand Management. While the vulnerability is in Oracle Demantra Demand Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Demantra Demand Management. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).

References

Related CVEs

  • CVE-2026-61076Oracle Corporation / PeopleSoft Enterprise HCM Talent Acquisition ManagerCVSS 9.9
  • CVE-2026-61072Oracle Corporation / PeopleSoft Enterprise FIN Staffing Front Office BrazilCVSS 9.9
  • CVE-2026-61065Oracle Corporation / Oracle Access ManagerCVSS 9.8
  • CVE-2026-61059Oracle Corporation / PeopleSoft Enterprise SCM Order ManagementCVSS 9.1
  • CVE-2026-60999Oracle Corporation / Oracle Data IntegratorCVSS 9.8
  • CVE-2026-60880Oracle Corporation / Oracle Work in ProcessCVSS 9.8
  • CVE-2026-60773Oracle Corporation / Oracle Application Object LibraryCVSS 9.6
  • CVE-2026-60719Oracle Corporation / Oracle BI PublisherCVSS 9.9

← CVE Index: search every CVE from the last 30 days

This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.