CVE-2026-60440
HIGH
7.7
CVSS 3.1
Metadata
Severity & Metrics
7.7
HIGH CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Affected products (1)
| Vendor | Product | Platform | Versions |
|---|---|---|---|
| Oracle Corporation | Service Delivery Platform | — | 12.2.1.4.0, 14.1.2.0.0 |
Weakness (CWE)
| CWE | Source | Description |
|---|---|---|
| — | cna | Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Service Delivery Platform. While the vulnerability is in Service Delivery Platform, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Service Delivery Platform accessible data. |
CVSS scores (1)
| Score | Severity | Version | Source | Vector |
|---|---|---|---|---|
| 7.7 | HIGH | 3.1 | cna | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N |
References (1)
- Oracle Advisory https://www.oracle.com/security-alerts/cpujul2026.html