CVE-2026-60952: High severity Oracle Oracle Transportation Execution vulnerability
Vulnerability in the Oracle Transportation Execution product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Transportation Execution. Successful attacks of this vulnerability can result in takeover of Oracle Transportation Execution. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-60952?
The severity of CVE-2026-60952 is classified as high with a CVSS score of 8.8.
How do I fix CVE-2026-60952?
To fix CVE-2026-60952, apply the latest security patches provided by Oracle for affected versions of the Oracle E-Business Suite.
Who is affected by CVE-2026-60952?
CVE-2026-60952 affects users of Oracle Transportation Execution in Oracle E-Business Suite versions 12.2.3 through 12.2.15.
What type of attacks can CVE-2026-60952 enable?
CVE-2026-60952 can allow low privileged attackers with network access via HTTP to compromise Oracle Transportation Execution.
What components are impacted by CVE-2026-60952?
CVE-2026-60952 impacts the Internal Operations component of the Oracle Transportation Execution product within Oracle E-Business Suite.