CVE-2026-60703
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
Vulnerability in Oracle Interaction Blending (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with local access can gain unauthorized access to critical data and create, delete, or modify it.
Risk Assessment
Risk includes breach of confidentiality and integrity of critical business data, potentially leading to information leakage or data manipulation.
Recommendation
Apply patches provided by Oracle for affected versions immediately and restrict local access to servers.
Other vulnerabilities in Oracle Interaction Blending
See all- CVE-2017-3372High
A vulnerability in the Oracle Interaction Blending component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires human interaction from a person other than the attacker, and attacks may significantly impact additional products.
- CVE-2026-60832Medium
Vulnerability in Oracle Interaction Blending (Internal Operations) versions 12.2.3-12.2.15. Difficult to exploit, requires high privileges and RMI access. Can lead to partial confidentiality, integrity, and availability impact.
- CVE-2026-60828High
Vulnerability in Oracle Interaction Blending from Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3-12.2.15. A high-privileged attacker with network access via HTTP can easily exploit this vulnerability, potentially leading to full system takeover.
Original NVD description (English source)
Vulnerability in the Oracle Interaction Blending product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Interaction Blending executes to compromise Oracle Interaction Blending. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Interaction Blending accessible data as well as unauthorized access to critical data or complete access to all Oracle Interaction Blending accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).