CVE-2026-60321
MediumCVSS 5.7Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
Oracle Project Manufacturing (part of Oracle E-Business Suite) version V16 has a vulnerability in the PJM Command Center component. A privileged attacker with local access can unauthorizedly create, delete, or modify critical data and gain full access to all data.
Risk Assessment
The risk is complete compromise of confidentiality and integrity of data in Oracle Project Manufacturing, which may lead to leakage or manipulation of production data.
Recommendation
Apply the Oracle patch for Oracle Project Manufacturing version V16 that fixes this vulnerability.
Other vulnerabilities in Oracle Project Manufacturing
See all- CVE-2026-60339Low
Vulnerability in Oracle Project Manufacturing (component: PJM Command Center) version V16. Difficult to exploit, requires low privileges and network access via HTTP. Successful attack may lead to unauthorized read access to a subset of data.
- CVE-2026-60336Medium
Vulnerability in Oracle Project Manufacturing (PJM Command Center component) version V16. A high-privileged attacker with local access can exploit this vulnerability, potentially leading to unauthorized creation, deletion, or modification of critical data and access to all Oracle Project Manufacturing data.
Original NVD description (English source)
Vulnerability in the Oracle Project Manufacturing product of Oracle E-Business Suite (component: PJM Command Center). The supported version that is affected is V16. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Project Manufacturing executes to compromise Oracle Project Manufacturing. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Project Manufacturing accessible data as well as unauthorized access to critical data or complete access to all Oracle Project Manufacturing accessible data. CVSS 3.1 Base Score 5.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N).