CVE-2026-60917
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
Vulnerability in Oracle Inventory Management (Core Receiving component) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and modify it.
Risk Assessment
Risk of unauthorized read and modification of critical data in Oracle Inventory Management, potentially compromising confidentiality and integrity.
Recommendation
Apply the patch provided by Oracle in the Critical Patch Update (CPU) for E-Business Suite.
Other vulnerabilities in Oracle Inventory Management
See all- CVE-2026-61028Low
Vulnerability in Oracle Inventory Management (versions 12.2.3-12.2.15) allows a high-privileged attacker with local logon to cause a partial denial of service.
- CVE-2026-61023Medium
Vulnerability in Oracle Inventory Management (Internal Operations component) versions 12.2.3-12.2.15. A high-privileged attacker with local access can exploit this vulnerability, potentially leading to takeover of Oracle Inventory Management.
- CVE-2026-61014High
Vulnerability in Oracle Inventory Management product of Oracle E-Business Suite (component: Internal Operations). Affected versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can easily exploit this, leading to unauthorized access to critical data or full access to all Oracle Inventory Management data. Attacks may impact additional products (scope change). CVSS 7.7 (Confidentiality).
Original NVD description (English source)
Vulnerability in the Oracle Inventory Management product of Oracle E-Business Suite (component: Core Receiving). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Inventory Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Inventory Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Inventory Management accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).