CVE-2026-60896: Infoleak
Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Work in Process executes to compromise Oracle Work in Process. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Work in Process accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Work in Process. CVSS 3.1 Base Score 3.6 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-60896?
The severity of CVE-2026-60896 is rated low with a score of 3.6.
What software is affected by CVE-2026-60896?
CVE-2026-60896 affects the Oracle Work in Process component of Oracle E-Business Suite in versions 12.2.3 to 12.2.15.
How is CVE-2026-60896 exploited?
CVE-2026-60896 is a difficult to exploit vulnerability that allows a low privileged attacker to access internal operations.
What type of vulnerability is CVE-2026-60896 classified as?
CVE-2026-60896 is classified as an information leak vulnerability.
What are the potential impacts of CVE-2026-60896?
The impacts of CVE-2026-60896 include potential disclosure of sensitive information due to its low exploitability.