CVE-2026-60930: Infoleak
Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Public Sector Financials. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Public Sector Financials accessible data. CVSS 3.1 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-60930?
The severity of CVE-2026-60930 is low with a CVSS score of 3.1.
How do I fix CVE-2026-60930?
To fix CVE-2026-60930, you should apply the latest security patches provided by Oracle for the affected versions.
What are the affected versions for CVE-2026-60930?
CVE-2026-60930 affects Oracle E-Business Suite versions 12.2.3 through 12.2.15.
What type of vulnerability is CVE-2026-60930?
CVE-2026-60930 is classified as an information leak vulnerability.
Who can exploit CVE-2026-60930?
A low privileged attacker with network access via HTTP can exploit CVE-2026-60930.