CVE-2026-60584
HighCVSS 7.6Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
Vulnerability in Oracle Transportation Management (component: CSV Management). Affected version is 6.5.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise the system. Successful attack can result in unauthorized access to critical data, modification, and partial denial of service.
Risk Assessment
Risk includes leakage of critical data, modification, and potential service disruption by a low-privileged attacker.
Recommendation
Apply patches provided by Oracle for version 6.5.3 and restrict access privileges.
Other vulnerabilities in Oracle Transportation Management
See all- CVE-2016-3470High
Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.4.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to Install.
- CVE-2015-2663High
Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, and 6.3.0 through 6.3.7 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Business Process Automation.
- CVE-2026-60583High
Vulnerability in Oracle Transportation Management (Install component) version 6.5.3. Low-privileged attacker via HTTP can take over the system.
- CVE-2026-60434Medium
Vulnerability in Oracle Transportation Management (version 6.5.3) in the Authentication component. A low-privileged attacker via HTTP can gain unauthorized read access to data.
- CVE-2026-60433Medium
Vulnerability in Oracle Transportation Management (part of Oracle Supply Chain) version 6.5.3. Allows an authenticated attacker with high privileges and network access via HTTP to unauthorizedly create, delete, or modify critical data and access it.
Original NVD description (English source)
Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: CSV Management). The supported version that is affected is 6.5.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Transportation Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Transportation Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Transportation Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Transportation Management. CVSS 3.1 Base Score 7.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L).