Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Install). The supported version that is affected is 6.5.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Transportation Management. Successful attacks of this vulnerability can result in takeover of Oracle Transportation Management. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
References
| Link | Resource |
|---|---|
| https://www.oracle.com/security-alerts/cpujul2026.html |
Configurations
No configuration.
History
27 Jul 2026, 13:18
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-284 CWE-306 CWE-269 CWE-287 |
21 Jul 2026, 22:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-07-21 22:17
Updated : 2026-07-27 13:18
NVD link : CVE-2026-60583
Mitre link : CVE-2026-60583
CVE.ORG link : CVE-2026-60583
JSON object : View
Products Affected
No product.