CVE-2026-60799

HighCVSS 7.1

Published: 21/07/2026(UTC)Updated: 07/08/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

21th percentile - higher than 21% of all known CVEs

Summary

Oracle Compensation Workbench (part of Oracle E-Business Suite) versions 12.2.3-12.2.15 has an easily exploitable vulnerability by a low-privileged attacker via HTTP. Successful attack can result in unauthorized access to critical data and the ability to modify it.

Risk Assessment

An attacker can access and modify sensitive payroll data, compromising the confidentiality and integrity of the system.

Recommendation

Apply the security patch provided by Oracle. Restrict access to the application to trusted users only.

Other vulnerabilities in Oracle Compensation Workbench

CVE-2026-60800High
Vulnerability in Oracle Compensation Workbench (component: Compensation Workbench) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can easily exploit this flaw to gain unauthorized access to critical data and modify it.

Original NVD description (English source)

Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite (component: Compensation Workbench). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Compensation Workbench. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Compensation Workbench accessible data as well as unauthorized update, insert or delete access to some of Oracle Compensation Workbench accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).