CVE-2026-60790
HighCVSS 8.0Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
Vulnerability in Oracle Sales Offline (component: Internal Operations) versions 12.2.3-12.2.15. Difficult to exploit, requires high-privileged attacker with network access via HTTP. Successful attack can lead to takeover of Oracle Sales Offline and impact other products.
Risk Assessment
Risk of critical offline sales system takeover and potential impact on other organizational systems.
Recommendation
Apply the patch provided by Oracle for versions 12.2.3-12.2.15. Restrict network access to the system to trusted users only.
Other vulnerabilities in Oracle Sales Offline
See all- CVE-2026-60788High
Vulnerability in Oracle Sales Offline (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can easily gain unauthorized access to critical data, modify it, and cause a partial denial of service (partial DOS).
- CVE-2026-60735High
Vulnerability in Oracle Sales Offline of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and perform unauthorized creation, deletion, or modification of critical data. CVSS 8.1 (Confidentiality and Integrity impacts).
Original NVD description (English source)
Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Sales Offline. While the vulnerability is in Oracle Sales Offline, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Sales Offline. CVSS 3.1 Base Score 8.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H).