中文

// CVE · PUBLISHED 2026-07-21

CVE-2026-61065

Oracle Corporation / Oracle Access Manager

9.8 · CVSS 3.1Critical

Description

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. Successful attacks of this vulnerability can result in takeover of Oracle Access Manager. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

References

Related CVEs

  • CVE-2026-61100Oracle Corporation / Oracle WebCenter Enterprise CaptureCVSS 9.8
  • CVE-2026-61097Oracle Corporation / Oracle Banking Trade Finance Process ManagementCVSS 9.6
  • CVE-2026-61076Oracle Corporation / PeopleSoft Enterprise HCM Talent Acquisition ManagerCVSS 9.9
  • CVE-2026-61072Oracle Corporation / PeopleSoft Enterprise FIN Staffing Front Office BrazilCVSS 9.9
  • CVE-2026-61059Oracle Corporation / PeopleSoft Enterprise SCM Order ManagementCVSS 9.1
  • CVE-2026-61041Oracle Corporation / Oracle Demantra Demand ManagementCVSS 9.9
  • CVE-2026-60999Oracle Corporation / Oracle Data IntegratorCVSS 9.8
  • CVE-2026-60880Oracle Corporation / Oracle Work in ProcessCVSS 9.8

← CVE Index: search every CVE from the last 30 days

This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.