CVE-2026-60688: Medium severity Oracle Oracle Scheduler (Oracle E-Business Suite) - Rules UI vulnerability
Vulnerability in the Oracle Scheduler product of Oracle E-Business Suite (component: Rules UI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Scheduler. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Scheduler accessible data as well as unauthorized read access to a subset of Oracle Scheduler accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Scheduler. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-60688?
The severity of CVE-2026-60688 is rated as medium, with a score of 6.3.
How do I fix CVE-2026-60688?
To fix CVE-2026-60688, apply the latest security patches provided by Oracle for the affected versions of Oracle E-Business Suite.
What types of attacks does CVE-2026-60688 allow?
CVE-2026-60688 allows low privileged attackers with network access via HTTP to compromise the Oracle Scheduler.
Which versions of Oracle E-Business Suite are affected by CVE-2026-60688?
The affected versions of Oracle E-Business Suite for CVE-2026-60688 are from 12.2.3 to 12.2.15.
Can I exploit CVE-2026-60688 without special privileges?
Yes, CVE-2026-60688 is easily exploitable by low privileged attackers, making it a significant concern.