CVE-2026-60156

MediumCVSS 5.3

Published: 21/07/2026(UTC)Updated: 06/08/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.32%

24th percentile - higher than 24% of all known CVEs

Summary

Vulnerability in Oracle APEX (General). An unauthenticated attacker via HTTP can read a subset of data.

Risk Assessment

Risk of data leakage from APEX applications.

Recommendation

Update Oracle APEX to versions 24.1, 24.2, or 26.1 with the latest patches.

Other vulnerabilities in Oracle APEX

CVE-2026-60630Medium
A vulnerability in Oracle APEX allows a low-privileged attacker with local access to gain complete access to all APEX data.

Original NVD description (English source)

Vulnerability in Oracle APEX (component: General). Supported versions that are affected are 24.1, 24.2 and 26.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle APEX. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle APEX accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS