Vulnerability in Oracle Application Object Library of Oracle E-Business Suite
CVE-2026-60776

6.7MEDIUM

Key Information:

Vendor

Oracle
Status
Oracle Application Object Library
Vendor
CVE Published:
21 July 2026

What is CVE-2026-60776?

An exploitable vulnerability exists in the Oracle Application Object Library component of Oracle E-Business Suite, specifically affecting versions 12.2.3 through 12.2.15. This issue allows an attacker with high privileges, already logged into the infrastructure where the Oracle Application Object Library operates, to compromise the system effectively. Successful exploitation can lead to a complete takeover of the Application Object Library, making it critical for organizations using this software to apply the necessary security patches and mitigate risks.

Affected Version(s)

Oracle Application Object Library 12.2.3 <= 12.2.15

References

https://www.oracle.com/security-alerts/cpujul2026.html
vendor-advisory

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.