Vulnerability in the Oracle Applications Technology Stack product of Oracle E-Business Suite (component: Client System Analyzer). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Technology Stack. Successful attacks of this vulnerability can result in takeover of Oracle Applications Technology Stack. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).
References
| Link | Resource |
|---|---|
| https://www.oracle.com/security-alerts/cpujul2026.html |
Configurations
No configuration.
History
24 Jul 2026, 20:18
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-284 CWE-306 |
21 Jul 2026, 22:18
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-07-21 22:18
Updated : 2026-07-24 20:18
NVD link : CVE-2026-60670
Mitre link : CVE-2026-60670
CVE.ORG link : CVE-2026-60670
JSON object : View
Products Affected
No product.