๐Ÿ” CVE Alert

CVE-2026-61013

MEDIUM 6.6
CVSS Score
6.6
EPSS Score
0.0%
EPSS Percentile
0th

Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Time and Labor. While the vulnerability is in Oracle Time and Labor, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Time and Labor accessible data as well as unauthorized update, insert or delete access to some of Oracle Time and Labor accessible data. CVSS 3.1 Base Score 6.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:N).

Vendor oracle corporation
Product oracle time and labor
Published Jul 21, 2026
Stay Ahead of the Next One

Get instant alerts for oracle corporation oracle time and labor

Be the first to know when new medium vulnerabilities affecting oracle corporation oracle time and labor are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:N
Attack Vector
Network
Attack Complexity
High
Privileges Required
High
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
Low
Availability
None

Affected Versions

Oracle Corporation / Oracle Time and Labor
12.2.3 โ‰ค 12.2.15

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
oracle.com: https://www.oracle.com/security-alerts/cpujul2026.html