Network Access Vulnerability in Oracle E-Business Suite's Work in Process Component
CVE-2026-60888

5.3MEDIUM

Key Information:

Vendor

Oracle
Status
Oracle Work In Process
Vendor
CVE Published:
21 July 2026

What is CVE-2026-60888?

The vulnerability present in Oracle E-Business Suite's Work in Process component allows low privileged attackers with network access via HTTP to compromise the system. Users of the affected version range (12.2.3 to 12.2.15) are at risk of unauthorized access to sensitive data stored within the Oracle Work in Process. This vulnerability poses significant risks by enabling potential intruders to gain access to crucial information while remaining difficult to exploit.

Affected Version(s)

Oracle Work in Process 12.2.3 <= 12.2.15

References

https://www.oracle.com/security-alerts/cpujul2026.html
vendor-advisory

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.