CVE-2026-60763
HighCVSS 8.4Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
Vulnerability in Oracle Applications Manager (component: Command Line - RapidClone) versions 12.2.3-12.2.15. An unauthenticated attacker with local access can fully compromise the system.
Risk Assessment
The organization is at risk of complete takeover of Oracle Applications Manager, potentially leading to loss of confidentiality, integrity, and availability.
Recommendation
It is recommended to immediately update to a patched version and restrict local access to the system.
Other vulnerabilities in Oracle Applications Manager
See all- CVE-2026-46933Critical
A vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite allows a low privileged attacker with network access via HTTP to compromise Oracle Applications Manager. Attacks may significantly impact additional products.
- CVE-2026-60322Medium
Vulnerability in Oracle Applications Manager component of Oracle E-Business Suite (Oracle Diagnostics Interfaces). Affects versions 12.2.3-12.2.15. An unauthenticated attacker with network access via HTTP can exploit it without user interaction. Successful attack allows unauthorized update, insert, or delete access to some data and read access to a subset of data.
Original NVD description (English source)
Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Command Line - RapidClone). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Applications Manager executes to compromise Oracle Applications Manager. Successful attacks of this vulnerability can result in takeover of Oracle Applications Manager. CVSS 3.1 Base Score 8.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).