CVE-2026-60999

CriticalCVSS 9.8

Published: 21/07/2026(UTC)Updated: 24/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.36%

28th percentile - higher than 28% of all known CVEs

Summary

Vulnerability in Oracle Data Integrator (Rest Service component) allows unauthenticated attacker via HTTPS to take over the system. CVSS 9.8.

Risk Assessment

An attacker can fully compromise Oracle Data Integrator, leading to loss of confidentiality, integrity, and availability.

Recommendation

Apply the Oracle security patch for version 14.1.2.0.0 or contact the vendor for an update.

Original NVD description (English source)

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Rest Service). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Data Integrator. Successful attacks of this vulnerability can result in takeover of Oracle Data Integrator. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).