Back to overview

CVE-2026-61067

HIGH
8.0
CVSS 3.1

Metadata

CVE ID
CVE-2026-61067
State
PUBLISHED
Assigner
oracle
Reserved
2026-07-08 15:51 UTC
Published
2026-07-21 21:37 UTC
Last updated
2026-07-21 21:37 UTC
Vendor / Product
Oracle Corporation / Oracle Access Manager
Sources
cve.org  ·  NVD

Severity & Metrics

8.0 HIGH CVSS 3.1
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products (1)
VendorProductPlatformVersions
Oracle Corporation Oracle Access Manager 12.2.1.4.0, 14.1.2.1.0
Weakness (CWE)
CWESourceDescription
cna Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware where the Oracle Access Manager executes to compromise Oracle Access Manager. Successful attacks of this vulnerability can result in takeover of Oracle Access Manager.
CVSS scores (1)
ScoreSeverityVersionSourceVector
8.0 HIGH 3.1 cna CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Back to overview