CVE-2026-60898
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
Vulnerability in Oracle Warehouse Management (Internal Operations component) versions 12.2.3-12.2.15. Easily exploitable, allows a low-privileged attacker with network access via HTTP to take over the warehouse management system.
Risk Assessment
Successful attack can lead to full takeover of the warehouse management system, compromising confidentiality, integrity, and availability of warehouse data.
Recommendation
Apply Oracle patches for versions 12.2.3-12.2.15 immediately and implement strong authentication mechanisms.
Other vulnerabilities in Oracle Warehouse Management
See all- CVE-2026-70774High
Vulnerability in Oracle Warehouse Management (component: Internal Operations) versions 12.2.3-12.2.15. A low-privileged attacker can modify data and cause partial denial of service. CVSS 7.1.
- CVE-2026-70772High
Vulnerability in Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. Easily exploitable by unauthenticated attacker via HTTP, allowing unauthorized access to critical data or complete access to all product data.
- CVE-2026-70771High
Vulnerability in Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. Easily exploitable by low-privileged attacker via HTTPS, with potential impact on other products (scope change). Allows unauthorized access to critical data or complete access to all product data.
- CVE-2026-70770High
Vulnerability in Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. Easily exploitable by low-privileged attacker via HTTP. Allows unauthorized creation, deletion, or modification of critical data, unauthorized access, and partial denial of service.
Original NVD description (English source)
Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Warehouse Management. Successful attacks of this vulnerability can result in takeover of Oracle Warehouse Management. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).