CVE-2026-60932: High severity Oracle Oracle E-Business Suite - Oracle Labor Distribution vulnerability
Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Labor Distribution. Successful attacks of this vulnerability can result in takeover of Oracle Labor Distribution. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Oracle E-Business Suite - Oracle Labor Distribution (Internal Operations)to a version that resolves this vulnerability.Fixed in 12.2.3-12.2.15
Event History
Frequently Asked Questions
What is the severity of CVE-2026-60932?
CVE-2026-60932 has a high severity rating of 8.8.
What impact does CVE-2026-60932 have on Oracle E-Business Suite?
CVE-2026-60932 allows a low privileged attacker with network access to compromise the Oracle Labor Distribution component.
How do I fix CVE-2026-60932?
Fixing CVE-2026-60932 involves applying the latest security patches provided by Oracle for affected versions.
Which versions of Oracle E-Business Suite are affected by CVE-2026-60932?
CVE-2026-60932 affects Oracle E-Business Suite versions 12.2.3 to 12.2.15.
Is CVE-2026-60932 exploitable remotely?
Yes, CVE-2026-60932 is easily exploitable by an attacker with network access via HTTP.