CVE-2026-60724
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
Vulnerability in Oracle Customer Interaction History (Outcome-Result) versions 12.2.3-12.2.15. A low-privileged attacker via HTTP can compromise confidentiality and integrity.
Risk Assessment
Attack can lead to unauthorized read and modification of data in Oracle Customer Interaction History, compromising confidentiality and integrity.
Recommendation
Apply Oracle patches for Oracle Customer Interaction History. Monitor access to historical interaction data.
Other vulnerabilities in Oracle Customer Interaction History
See all- CVE-2017-3442High
A vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise data. It requires interaction from a third party, increasing the risk of unauthorized access to critical data.
- CVE-2017-3441High
Vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise data. It requires human interaction from a person other than the attacker, which may lead to unauthorized access to critical data.
- CVE-2017-3440High
Vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise data. It requires interaction from a third party, increasing the risk of unauthorized access to critical data.
- CVE-2016-5595High
Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity.
- CVE-2016-5593High
Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity.
- CVE-2016-5592High
Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors.
- CVE-2016-5591High
Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity.
- CVE-2016-5587High
Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity.
- CVE-2016-3512High
Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Function Security.
Original NVD description (English source)
Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Customer Interaction History. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Customer Interaction History accessible data as well as unauthorized read access to a subset of Oracle Customer Interaction History accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).