CVE-2026-60936

LowCVSS 3.1

Published: 21/07/2026(UTC)Updated: 29/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

20th percentile - higher than 20% of all known CVEs

Summary

Vulnerability in Oracle Labor Distribution (Oracle E-Business Suite) versions 12.2.3-12.2.15. A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to cause a partial denial of service (partial DOS).

Risk Assessment

A successful attack could result in reduced availability of Oracle Labor Distribution, potentially impacting labor distribution processes.

Recommendation

Apply the patch provided by Oracle in the relevant Critical Patch Update (CPU) for the affected version of Oracle E-Business Suite.

Original NVD description (English source)

Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Labor Distribution. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Labor Distribution. CVSS 3.1 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L).