CVE-2026-60828
HighCVSS 7.2Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
Vulnerability in Oracle Interaction Blending from Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3-12.2.15. A high-privileged attacker with network access via HTTP can easily exploit this vulnerability, potentially leading to full system takeover.
Risk Assessment
Risk includes complete loss of confidentiality, integrity, and availability of the Oracle Interaction Blending system, potentially disrupting customer interactions and exposing data.
Recommendation
Immediately apply patches provided by Oracle for versions 12.2.3-12.2.15 and restrict network access to the system to trusted administrators only.
Other vulnerabilities in Oracle Interaction Blending
See all- CVE-2017-3372High
A vulnerability in the Oracle Interaction Blending component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires human interaction from a person other than the attacker, and attacks may significantly impact additional products.
- CVE-2026-60832Medium
Vulnerability in Oracle Interaction Blending (Internal Operations) versions 12.2.3-12.2.15. Difficult to exploit, requires high privileges and RMI access. Can lead to partial confidentiality, integrity, and availability impact.
- CVE-2026-60703High
Vulnerability in Oracle Interaction Blending (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with local access can gain unauthorized access to critical data and create, delete, or modify it.
Original NVD description (English source)
Vulnerability in the Oracle Interaction Blending product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Interaction Blending. Successful attacks of this vulnerability can result in takeover of Oracle Interaction Blending. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).