CVE-2026-61271
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
Vulnerability in Oracle Document Management and Collaboration (versions 12.2.3-12.2.15) allows an unauthenticated attacker via HTTP to perform unauthorized modification, read access, and partial denial of service. CVSS 7.3.
Risk Assessment
The attack can compromise document integrity and confidentiality and disrupt system operations.
Recommendation
Apply Oracle patches for Oracle Document Management and Collaboration versions 12.2.3-12.2.15.
Other vulnerabilities in Oracle Document Management and Collaboration
See all- CVE-2026-83452Critical
Vulnerability in Oracle Document Management and Collaboration (component: Internal Operations) versions 12.2.3-12.2.15. An unauthenticated attacker with network access via HTTP can easily exploit it, leading to takeover of the system. CVSS 3.1 Base Score 9.8.
- CVE-2026-83454High
Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. Easily exploitable by a low privileged attacker with network access via HTTP, leading to takeover of Oracle Document Management and Collaboration. CVSS 3.1 Base Score 8.8.
- CVE-2026-83453High
Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Internal Operations). Supported versions affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows a high privileged attacker with network access via HTTP to compromise the product.
Original NVD description (English source)
Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Attachments). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Document Management and Collaboration. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Document Management and Collaboration accessible data as well as unauthorized read access to a subset of Oracle Document Management and Collaboration accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Document Management and Collaboration. CVSS 3.1 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS