CVE-2026-61067
HIGH
8.0
CVSS 3.1
Metadata
Severity & Metrics
8.0
HIGH CVSS 3.1
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products (1)
| Vendor | Product | Platform | Versions |
|---|---|---|---|
| Oracle Corporation | Oracle Access Manager | — | 12.2.1.4.0, 14.1.2.1.0 |
Weakness (CWE)
| CWE | Source | Description |
|---|---|---|
| — | cna | Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware where the Oracle Access Manager executes to compromise Oracle Access Manager. Successful attacks of this vulnerability can result in takeover of Oracle Access Manager. |
CVSS scores (1)
| Score | Severity | Version | Source | Vector |
|---|---|---|---|---|
| 8.0 | HIGH | 3.1 | cna | CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
References (1)
- Oracle Advisory https://www.oracle.com/security-alerts/cpujul2026.html