CVE-2026-60723: High severity Oracle Oracle Data Integrator vulnerability

Published Jul 21, 2026

Updated

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Market Place). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Data Integrator executes to compromise Oracle Data Integrator. While the vulnerability is in Oracle Data Integrator, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Data Integrator accessible data as well as unauthorized access to critical data or complete access to all Oracle Data Integrator accessible data. CVSS 3.1 Base Score 8.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N).

Affected Software

3 affected components

Oracle Oracle Data Integrator=12.2.1.4.0, =14.1.2.0.0

Oracle Data Integrator=12.2.1.4.0

Oracle Data Integrator=14.1.2.0.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Oracle Data Integrator (Oracle Fusion Middleware) / Market Place to a version that resolves this vulnerability.
Fixed in 12.2.1.4.0
Upgrade
Upgrade Oracle Data Integrator (Oracle Fusion Middleware) / Market Place to a version that resolves this vulnerability.
Fixed in 14.1.2.0.0

Event History

Jul 21, 2026

CVE Published

via MITRE·09:36 PM

Data Sourced

via MITRE·09:36 PM

DescriptionSeverity

Data Sourced

via NVD·10:18 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2026-60723?

CVE-2026-60723 has a severity rating of high at 8.4.

How do I fix CVE-2026-60723?

To address CVE-2026-60723, update the Oracle Data Integrator to the latest supported version.

What types of attacks are possible due to CVE-2026-60723?

CVE-2026-60723 allows low privileged attackers to exploit the vulnerability for unauthorized actions.

Which versions of Oracle Data Integrator are affected by CVE-2026-60723?

The affected versions of Oracle Data Integrator are 12.2.1.4.0 and 14.1.2.0.0.

Can CVE-2026-60723 lead to data exposure?

Yes, CVE-2026-60723 can lead to unauthorized access and compromise the confidentiality of sensitive data.