CVE-2026-61262

Vulnerability in the Oracle Teleservice product of Oracle E-Business Suite (component: Service Diagnostics Scripts). Supported versions that are affected are 12.2.3-12.215. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Teleservice. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Teleservice accessible data as well as unauthorized read access to a subset of Oracle Teleservice accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).
Configurations

No configuration.

History

22 Jul 2026, 19:17

Type Values Removed Values Added
CWE CWE-284

21 Jul 2026, 22:18

Type Values Removed Values Added
New CVE

Information

Published : 2026-07-21 22:18

Updated : 2026-07-23 18:29


NVD link : CVE-2026-61262

Mitre link : CVE-2026-61262

CVE.ORG link : CVE-2026-61262


JSON object : View

Products Affected

No product.

CWE
CWE-284

Improper Access Control