CVE-2026-60891: Infoleak
Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Work in Process executes to compromise Oracle Work in Process. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Work in Process accessible data. CVSS 3.1 Base Score 1.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-60891?
CVE-2026-60891 has a severity rating of low at 1.9.
How does CVE-2026-60891 affect Oracle E-Business Suite?
CVE-2026-60891 affects the Oracle Work in Process component of Oracle E-Business Suite versions 12.2.3 to 12.2.15.
Who can exploit CVE-2026-60891?
CVE-2026-60891 can be exploited by a high privileged attacker with logon access to the infrastructure.
What type of vulnerability is CVE-2026-60891?
CVE-2026-60891 is classified as an information leak vulnerability.
Is there a fix available for CVE-2026-60891?
As of now, specific remediation details for CVE-2026-60891 are not provided, but it is advisable to consult Oracle's security updates.