CVE-2026-60339

LowCVSS 3.1

Published: 21/07/2026(UTC)Updated: 31/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.23%

14th percentile - higher than 14% of all known CVEs

Summary

Vulnerability in Oracle Project Manufacturing (component: PJM Command Center) version V16. Difficult to exploit, requires low privileges and network access via HTTP. Successful attack may lead to unauthorized read access to a subset of data.

Risk Assessment

Risk of confidential production data leakage, albeit limited to a subset of data.

Recommendation

Apply Oracle patch when available; restrict network access to PJM Command Center.

Original NVD description (English source)

Vulnerability in the Oracle Project Manufacturing product of Oracle E-Business Suite (component: PJM Command Center). The supported version that is affected is V16. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Project Manufacturing. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Project Manufacturing accessible data. CVSS 3.1 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N).