CVE-2026-60336
MediumCVSS 5.7Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
Vulnerability in Oracle Project Manufacturing (PJM Command Center component) version V16. A high-privileged attacker with local access can exploit this vulnerability, potentially leading to unauthorized creation, deletion, or modification of critical data and access to all Oracle Project Manufacturing data.
Risk Assessment
The risk involves potential compromise of confidentiality and integrity of project manufacturing data, potentially leading to data manipulation or information leakage.
Recommendation
Immediately apply patches provided by Oracle for version V16 and restrict local access to servers to trusted high-privileged administrators only.
Other vulnerabilities in Oracle Project Manufacturing
See all- CVE-2026-60339Low
Vulnerability in Oracle Project Manufacturing (component: PJM Command Center) version V16. Difficult to exploit, requires low privileges and network access via HTTP. Successful attack may lead to unauthorized read access to a subset of data.
- CVE-2026-60321Medium
Oracle Project Manufacturing (part of Oracle E-Business Suite) version V16 has a vulnerability in the PJM Command Center component. A privileged attacker with local access can unauthorizedly create, delete, or modify critical data and gain full access to all data.
Original NVD description (English source)
Vulnerability in the Oracle Project Manufacturing product of Oracle E-Business Suite (component: PJM Command Center). The supported version that is affected is V16. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Project Manufacturing executes to compromise Oracle Project Manufacturing. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Project Manufacturing accessible data as well as unauthorized access to critical data or complete access to all Oracle Project Manufacturing accessible data. CVSS 3.1 Base Score 5.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N).