CVE-2026-60770: High severity Oracle Oracle Application Object Library vulnerability
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in takeover of Oracle Application Object Library. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-60770?
The severity of CVE-2026-60770 is rated as high with a score of 7.5.
What systems are affected by CVE-2026-60770?
CVE-2026-60770 affects the Oracle Application Object Library component of the Oracle E-Business Suite, specifically versions 12.2.3 to 12.2.15.
How do I fix CVE-2026-60770?
To mitigate CVE-2026-60770, apply the latest security patches provided by Oracle for the Oracle E-Business Suite.
What type of attacker can exploit CVE-2026-60770?
CVE-2026-60770 can be exploited by a low privileged attacker with network access via HTTP.
What is the impact of CVE-2026-60770?
CVE-2026-60770 can allow an attacker to compromise the Oracle Application Object Library, potentially leading to unauthorized access and data breaches.