CVE-2026-60804
LowCVSS 2.0Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
In Oracle E-Business Intelligence (versions 12.2.3-12.2.15), a vulnerability in the Definition component allows a high-privileged attacker with network access via HTTP to gain unauthorized update, insert, or delete access to some data, requiring user interaction.
Risk Assessment
An attacker could unauthorizedly modify data in the system, potentially compromising data integrity.
Recommendation
Apply the appropriate patch from Oracle or temporarily restrict access to the vulnerable component.
Original NVD description (English source)
Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: Definition). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle E-Business Intelligence. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle E-Business Intelligence accessible data. CVSS 3.1 Base Score 2.0 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N).