Vulnerability in Oracle Fusion Middleware Affecting Oracle Platform Security for Java
CVE-2026-60369

9.9CRITICAL

Key Information:

Vendor

Oracle
Status
Oracle Platform Security For Java
Vendor
CVE Published:
22 July 2026

What is CVE-2026-60369?

A security flaw in Oracle Platform Security for Java, part of Oracle Fusion Middleware, allows low privileged attackers with HTTP network access to compromise the product. While the vulnerability primarily affects Oracle Platform Security for Java versions 12.2.1.4.0 and 14.1.2.0.0, its exploitation may lead to broader implications for additional products due to potential changes in the scope of attacks. Success in exploiting this vulnerability could allow an attacker to take control of Oracle Platform Security for Java, posing significant risks to confidentiality, integrity, and availability.

Affected Version(s)

Oracle Platform Security for Java 12.2.1.4.0

Oracle Platform Security for Java 14.1.2.0.0

References

https://www.oracle.com/security-alerts/cpujul2026.html
vendor-advisory

CVSS V3.1

Score:
9.9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.