Vulnerability in Oracle Fusion Middleware's Oracle Platform Security for Java
CVE-2026-60370

7.5HIGH

Key Information:

Vendor

Oracle
Status
Oracle Platform Security For Java
Vendor
CVE Published:
22 July 2026

What is CVE-2026-60370?

A vulnerability exists in the Oracle Platform Security for Java component of Oracle Fusion Middleware that can be exploited by a low-privileged attacker with network access via HTTP. This vulnerability affects supported versions 12.2.1.4.0 and 14.1.2.0.0, allowing potential takeover of the Oracle Platform Security for Java. The complexity of the attack is relatively low, raising significant concerns regarding the security of affected systems. Organizations using these versions are advised to apply necessary patches and updates promptly to mitigate risks.

Affected Version(s)

Oracle Platform Security for Java 12.2.1.4.0

Oracle Platform Security for Java 14.1.2.0.0

References

https://www.oracle.com/security-alerts/cpujul2026.html
vendor-advisory

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.