CVE-2026-60804
LowCVSS 2.0Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
In Oracle E-Business Intelligence (versions 12.2.3-12.2.15), a vulnerability in the Definition component allows a high-privileged attacker with network access via HTTP to gain unauthorized update, insert, or delete access to some data, requiring user interaction.
Risk Assessment
An attacker could unauthorizedly modify data in the system, potentially compromising data integrity.
Recommendation
Apply the appropriate patch from Oracle or temporarily restrict access to the vulnerable component.
Other vulnerabilities in Oracle E-Business Intelligence
See all- CVE-2026-60802Medium
Vulnerability in Oracle E-Business Intelligence (Internal Operations) versions 12.2.3-12.2.15. An unauthenticated attacker via HTTP, requiring user interaction, can compromise data and affect other products.
- CVE-2026-60801Medium
Vulnerability in Oracle E-Business Intelligence (component: Internal Operations) allows a high-privileged attacker to gain unauthorized access and modify critical data. The attack is difficult, requires network access via HTTP.
- CVE-2026-60736High
Vulnerability in Oracle E-Business Intelligence product of Oracle E-Business Suite (component: Definition). Affects versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can compromise data confidentiality and integrity.
Original NVD description (English source)
Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: Definition). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle E-Business Intelligence. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle E-Business Intelligence accessible data. CVSS 3.1 Base Score 2.0 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS