CVE-2026-60339
LowCVSS 3.1Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
Vulnerability in Oracle Project Manufacturing (component: PJM Command Center) version V16. Difficult to exploit, requires low privileges and network access via HTTP. Successful attack may lead to unauthorized read access to a subset of data.
Risk Assessment
Risk of confidential production data leakage, albeit limited to a subset of data.
Recommendation
Apply Oracle patch when available; restrict network access to PJM Command Center.
Other vulnerabilities in Oracle Project Manufacturing
See all- CVE-2026-60336Medium
Vulnerability in Oracle Project Manufacturing (PJM Command Center component) version V16. A high-privileged attacker with local access can exploit this vulnerability, potentially leading to unauthorized creation, deletion, or modification of critical data and access to all Oracle Project Manufacturing data.
- CVE-2026-60321Medium
Oracle Project Manufacturing (part of Oracle E-Business Suite) version V16 has a vulnerability in the PJM Command Center component. A privileged attacker with local access can unauthorizedly create, delete, or modify critical data and gain full access to all data.
Original NVD description (English source)
Vulnerability in the Oracle Project Manufacturing product of Oracle E-Business Suite (component: PJM Command Center). The supported version that is affected is V16. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Project Manufacturing. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Project Manufacturing accessible data. CVSS 3.1 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS