PT-2026-63132 · Oracle · Oracle Document Management/Collaboration+1

CVE-2026-61271

·

Published

2026-07-21

·

Updated

2026-08-19

CVSS v3.1

7.3

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Document Management and Collaboration versions 12.2.3 through 12.2.15
Description An issue exists in the Attachments component of the Oracle Document Management and Collaboration product. An unauthenticated attacker with network access via HTTP can compromise the system, leading to unauthorized read, update, insert, or delete access to specific data. Additionally, this can result in a partial denial of service (partial DOS), which is a condition where the system remains operational but some of its functions are unavailable.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Improper Access Control

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-61271

Affected Products

Oracle Document Management/Collaboration
Document Management/Collaboration