Oracle E-Business Suite Vulnerability in HCM Configuration Workbench
CVE-2026-60899

6.5MEDIUM

Key Information:

Vendor

Oracle
Status
Oracle Hcm Configuration Workbench
Vendor
CVE Published:
21 July 2026

What is CVE-2026-60899?

A vulnerability has been identified in the Oracle HCM Configuration Workbench component of the Oracle E-Business Suite, impacting versions 12.2.3 through 12.2.15. This vulnerability allows a low-privileged attacker with network access via HTTP to potentially gain unauthorized access to sensitive information stored within the Oracle HCM Configuration Workbench. Exploiting this vulnerability could result in the attacker obtaining full access to critical data, highlighting the importance of addressing this security concern proactively.

Affected Version(s)

Oracle HCM Configuration Workbench 12.2.3 <= 12.2.15

References

https://www.oracle.com/security-alerts/cpujul2026.html
vendor-advisory

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.