CVE-2026-60172
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
Vulnerability in Oracle Autonomous Health Framework (component: Developer triaging platform) affects versions 26.0.0, 26.1.0, and 26.2.0. A high-privileged attacker with local access, requiring user interaction, can take over the framework. Exploitation is difficult.
Risk Assessment
Risk of takeover of Oracle Autonomous Health Framework, compromising confidentiality, integrity, and availability of health data and infrastructure monitoring.
Recommendation
Apply Oracle patches and restrict local access, requiring user interaction for critical operations.
Other vulnerabilities in Oracle Autonomous Health Framework
See all- CVE-2026-70734High
Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer) affects versions 26-26.1.0, 26.2.0, 26.3.1, 26.5.0, and 26.5.2. A high-privileged attacker with local access can exploit it with user interaction, potentially leading to unauthorized data modification and complete denial of service.
- CVE-2026-70731High
Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer) affects versions 26-26.1.0, 26.2.0, 26.3.1, 26.5.0, and 26.5.2. A low-privileged attacker with local access can compromise integrity and availability, with scope change affecting other products.
- CVE-2026-70728High
Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer) affects versions 26-26.1.0, 26.2.0, 26.3.1, 26.5.0, and 26.5.2. A low-privileged attacker can gain full data access and modify some data over HTTP, with scope change.
- CVE-2026-70717High
Vulnerability in Oracle Autonomous Health Framework (component: Cluster Health Analyzer). Affects versions 26-26.1.0, 26.2.0, 26.3.1, 26.5.0, and 26.5.2. Difficult to exploit, allows a low-privileged attacker with physical access to the communication segment to gain unauthorized access and modify data.
- CVE-2026-70715High
Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). Affects versions 26-26.1.0, 26.2.0, 26.3.1, 26.5.0, and 26.5.2. Easily exploitable, allows an unauthenticated attacker with physical access to the communication segment to take over Oracle Autonomous Health Framework.
Original NVD description (English source)
Vulnerability in Oracle Autonomous Health Framework (component: Developer triaging platform). Supported versions that are affected are 26.0.0, 26.1.0 and 26.2.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Autonomous Health Framework executes to compromise Oracle Autonomous Health Framework. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Autonomous Health Framework. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).