CVE-2026-60829
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
A vulnerability in Oracle Advanced Outbound Telephony (Oracle E-Business Suite, component: Internal Operations) versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to take over Oracle Advanced Outbound Telephony. CVSS 8.8.
Risk Assessment
Successful exploitation could lead to full compromise of the Oracle Advanced Outbound Telephony component, impacting confidentiality, integrity, and availability.
Recommendation
Apply the latest Oracle Critical Patch Update immediately.
Other vulnerabilities in Oracle Advanced Outbound Telephony
See all- CVE-2017-10417High
Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a person other than the attacker, potentially leading to unauthorized access to critical data.
- CVE-2017-10416High
A vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires human interaction from a person other than the attacker, potentially leading to unauthorized access to critical data.
- CVE-2017-3393High
A vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, which may lead to unauthorized access to critical data.
- CVE-2017-3414High
A vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite allows an unauthenticated attacker with HTTP network access to compromise the system. It requires user interaction, which may lead to unauthorized access to critical data.
- CVE-2017-3413High
Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, increasing the risk for the organization.
- CVE-2017-3412High
Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires human interaction from a person other than the attacker, potentially leading to unauthorized access to critical data.
- CVE-2017-3411High
Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, increasing the risk of an attack.
- CVE-2017-3410High
Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires human interaction from a person other than the attacker, which may lead to unauthorized access to critical data.
- CVE-2017-3409High
Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, which may lead to unauthorized access to critical data.
- CVE-2017-3408High
Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, increasing the risk for the organization.
Original NVD description (English source)
Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks of this vulnerability can result in takeover of Oracle Advanced Outbound Telephony. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).