CVE-2026-60769

HighCVSS 7.5

Published: 18/08/2026(UTC)Updated: 21/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.35%

28th percentile - higher than 28% of all known CVEs

Summary

Vulnerability in Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. Difficult to exploit, but a low-privileged attacker can via HTTP take over Oracle General Ledger. CVSS 7.5.

Risk Assessment

Risk of complete takeover of the accounting system, potentially leading to severe confidentiality, integrity and availability breaches of financial data.

Recommendation

Apply Oracle patches for versions 12.2.3-12.2.15 and strengthen access controls to the system.

Original NVD description (English source)

Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle General Ledger. Successful attacks of this vulnerability can result in takeover of Oracle General Ledger. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).