CVE-2026-61047

Awaiting Analysis Awaiting Analysis - Queue

Oracle Production Scheduling Data Integrity Flaw

Publication date: 2026-07-21

Last updated on: 2026-07-24

Assigner: Oracle

Description

Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Production Scheduling executes to compromise Oracle Production Scheduling. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Production Scheduling accessible data. CVSS 3.1 Base Score 1.9 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-21

Last Modified

2026-07-24

Generated

2026-08-11

AI Q&A

2026-07-22

EPSS Evaluated

2026-08-09

NVD

CVE-2026-61047

EUVD

EUVD-2026-47261

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	production_scheduling	From 12.2.3 (inc) to 12.2.15 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle Production Scheduling within Oracle E-Business Suite. It affects versions 12.2.3 to 12.2.15. The issue allows a highly privileged attacker with local access to compromise the scheduling system, potentially leading to unauthorized data modifications.

Detection Guidance

Detection requires manual review of Oracle Production Scheduling configurations and logs due to the vulnerability's nature. Check for unauthorized data modifications in Oracle Production Scheduling accessible data. Review application logs for suspicious activity by high-privileged users.

Impact Analysis

If exploited, this vulnerability could allow an attacker to modify or delete data within Oracle Production Scheduling. This may disrupt production schedules or lead to incorrect scheduling decisions, impacting business operations.

Compliance Impact

This vulnerability could potentially impact compliance by allowing unauthorized data changes. For GDPR, this may affect data integrity. For HIPAA, unauthorized modifications to scheduling data could compromise record-keeping requirements.

Mitigation Strategies

Apply Oracle-provided patches or updates for Oracle Production Scheduling versions 12.2.3-12.2.15. Restrict high-privileged user access to the infrastructure where Oracle Production Scheduling executes. Monitor and audit data changes in Oracle Production Scheduling.

Hi! I’m here to help you understand CVE-2026-61047. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70