Back to overview

CVE-2026-60761

MEDIUM

6.5

CVSS 3.1

Metadata

CVE ID: CVE-2026-60761
State: PUBLISHED
Assigner: oracle
Reserved: 2026-07-08 15:51 UTC
Published: 2026-07-21 21:36 UTC
Last updated: 2026-07-21 21:36 UTC
Vendor / Product: Oracle Corporation / Oracle Applications DBA
Sources: cve.org · NVD

Severity & Metrics

6.5 MEDIUM CVSS 3.1

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Affected products (1)

Vendor	Product	Platform	Versions
Oracle Corporation	Oracle Applications DBA	—	12.2.3 ≤ 12.2.15

Weakness (CWE)

CWE	Source	Description
—	cna	Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Applications DBA executes to compromise Oracle Applications DBA. While the vulnerability is in Oracle Applications DBA, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Applications DBA accessible data.

CVSS scores (1)

Score	Severity	Version	Source	Vector
6.5	MEDIUM	3.1	cna	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

References (1)

Oracle Advisory https://www.oracle.com/security-alerts/cpujul2026.html

Back to overview