Vulnerability in Oracle Data Integrator of Oracle Fusion Middleware
CVE-2026-60318

3.3LOW

Key Information:

Vendor

Oracle
Status
Oracle Data Integrator
Vendor
CVE Published:
21 July 2026

What is CVE-2026-60318?

A vulnerability in Oracle Data Integrator allows an attacker with low privileges to gain unauthorized read access to sensitive data. This issue arises from the Patchset Assistant component within Oracle Fusion Middleware. The vulnerability is present in the supported versions of Oracle Data Integrator, specifically 12.2.1.4.0 and 14.1.2.0.0. Due to its exploitability, it poses a risk to data confidentiality, enabling unauthorized users to potentially access restricted information. It is crucial for organizations using affected versions to apply necessary patches and mitigate exposure.

Affected Version(s)

Oracle Data Integrator 12.2.1.4.0

Oracle Data Integrator 14.1.2.0.0

References

https://www.oracle.com/security-alerts/cpujul2026.html
vendor-advisory

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.