CVE-2026-60813: High severity Oracle Oracle iStore (Oracle E-Business Suite) - Shopping Cart vulnerability
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle iStore. Successful attacks of this vulnerability can result in takeover of Oracle iStore. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Oracle iStore (Oracle E-Business Suite) - Shopping Cartto a version that resolves this vulnerability.Fixed in 12.2.3-12.2.15
Event History
Frequently Asked Questions
What is the severity of CVE-2026-60813?
The severity of CVE-2026-60813 is rated as high, with a score of 7.2.
How do I fix CVE-2026-60813?
To fix CVE-2026-60813, update your Oracle iStore to versions 12.2.16 or later.
What systems are affected by CVE-2026-60813?
CVE-2026-60813 affects Oracle iStore versions 12.2.3 to 12.2.15 of the Oracle E-Business Suite.
What type of vulnerability is CVE-2026-60813?
CVE-2026-60813 is an easily exploitable vulnerability that allows a high privileged attacker to compromise Oracle iStore.
What impact does CVE-2026-60813 have on data security?
CVE-2026-60813 can lead to complete compromise of confidentiality, integrity, and availability of the data handled by Oracle iStore.