Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
1.9

Oracle E-Business Suite EDI Gateway Data Exposure

CVE-2026-61303 · published 3 months ago
Summary

The Oracle EDI Gateway in Oracle E-Business Suite versions 12.2.3-12.2.15 allows a highly privileged attacker to access sensitive data. This is a concern for companies using these versions, as it could lead to unauthorized access to important information. To mitigate this risk, update to a supported version of Oracle E-Business Suite as soon as possible.

Original advisory text
Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerabi...
Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle EDI Gateway executes to compromise Oracle EDI Gateway. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle EDI Gateway accessible data. CVSS 3.1 Base Score 1.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N).
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
1.9 Low
Exploitation
<1% chance of attack within 30 days
Type
CWE-200Information Exposure
Timeline
Published21 Jul 2026
Updated26 Oct 2026
First seen22 Jul 2026
Sources
CVE-2026-61303 · NVD
Track software like this
Free during beta