CVE-2026-61280

Oracle CVE-2026-61280 describes a vulnerability in Oracle Sales for Handhelds (Outlook Sync Win 32) within Oracle E-Business Suite. Affected versions are 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can cause unauthorized updates/inserts/deletes and reads, plus a pa...