Exploitable Vulnerability in Oracle E-Business Suite - Oracle Applications Manager
CVE-2026-60763

8.4HIGH

Key Information:

Vendor

Oracle
Status
Oracle Applications Manager
Vendor
CVE Published:
21 July 2026

What is CVE-2026-60763?

An unauthenticated remote code execution vulnerability in Oracle Applications Manager within Oracle E-Business Suite affects versions 12.2.3 through 12.2.15. An attacker with access to the infrastructure where Oracle Applications Manager runs could exploit this vulnerability to gain control over the application. Successful exploitation may lead to significant impacts on confidentiality, integrity, and availability, allowing unauthorized actions that could compromise sensitive data.

Affected Version(s)

Oracle Applications Manager 12.2.3 <= 12.2.15

References

https://www.oracle.com/security-alerts/cpujul2026.html
vendor-advisory

CVSS V3.1

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.