CVE-2026-60832
MediumCVSS 4.1Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
Vulnerability in Oracle Interaction Blending (Internal Operations) versions 12.2.3-12.2.15. Difficult to exploit, requires high privileges and RMI access. Can lead to partial confidentiality, integrity, and availability impact.
Risk Assessment
Attack may allow unauthorized read, modification, and partial denial of service of Oracle Interaction Blending, affecting service availability.
Recommendation
Apply Oracle patches for Oracle Interaction Blending. Restrict RMI access to trusted hosts only.
Other vulnerabilities in Oracle Interaction Blending
See all- CVE-2017-3372High
A vulnerability in the Oracle Interaction Blending component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires human interaction from a person other than the attacker, and attacks may significantly impact additional products.
- CVE-2026-60828High
Vulnerability in Oracle Interaction Blending from Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3-12.2.15. A high-privileged attacker with network access via HTTP can easily exploit this vulnerability, potentially leading to full system takeover.
- CVE-2026-60703High
Vulnerability in Oracle Interaction Blending (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with local access can gain unauthorized access to critical data and create, delete, or modify it.
Original NVD description (English source)
Vulnerability in the Oracle Interaction Blending product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via RMI to compromise Oracle Interaction Blending. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Interaction Blending accessible data as well as unauthorized read access to a subset of Oracle Interaction Blending accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Interaction Blending. CVSS 3.1 Base Score 4.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L).