CVE-2026-60762
MediumCVSS 5.7Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
Vulnerability in the Configuration component of Oracle Applications Technology Stack (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. Difficult to exploit, requires login and high privileges. Attacker can unauthorized create, delete or modify critical data and gain full access to it.
Risk Assessment
Risk of loss of confidentiality and integrity of critical business data, potentially leading to compliance violations and financial losses.
Recommendation
Apply the Oracle patch for E-Business Suite. Restrict system access to trusted administrators only.
Other vulnerabilities in Oracle Applications Technology Stack
See all- CVE-2015-4839High
Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to DB Listener.
- CVE-2015-4798High
An unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to DB Listener.
- CVE-2014-4278High
Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Oracle Forms.
- CVE-2026-60670High
Vulnerability in Oracle Applications Technology Stack (part of Oracle E-Business Suite) allows an unauthenticated attacker over HTTP to compromise the system. Exploitation is difficult.
Original NVD description (English source)
Vulnerability in the Oracle Applications Technology Stack product of Oracle E-Business Suite (component: Configuration). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Applications Technology Stack executes to compromise Oracle Applications Technology Stack. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Applications Technology Stack accessible data as well as unauthorized access to critical data or complete access to all Oracle Applications Technology Stack accessible data. CVSS 3.1 Base Score 5.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N).