CVE-2026-60800

HighCVSS 7.1

Published: 21/07/2026(UTC)Updated: 07/08/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

21th percentile - higher than 21% of all known CVEs

Summary

Vulnerability in Oracle Compensation Workbench (component: Compensation Workbench) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can easily exploit this flaw to gain unauthorized access to critical data and modify it.

Risk Assessment

The risk includes breach of confidentiality and integrity of compensation data, potentially leading to data leakage and unauthorized changes.

Recommendation

Apply the security patch from Oracle immediately and restrict network access to the system.

Other vulnerabilities in Oracle Compensation Workbench

CVE-2026-60799High
Oracle Compensation Workbench (part of Oracle E-Business Suite) versions 12.2.3-12.2.15 has an easily exploitable vulnerability by a low-privileged attacker via HTTP. Successful attack can result in unauthorized access to critical data and the ability to modify it.

Original NVD description (English source)

Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite (component: Compensation Workbench). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Compensation Workbench. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Compensation Workbench accessible data as well as unauthorized update, insert or delete access to some of Oracle Compensation Workbench accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).