← Back

CVE-2026-60943

nvd nist
Published: Jul 21, 2026Modified: Jul 29, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.6 / Impact: 5.9
Source: secalert_us@oracle.com (Secondary)

Description

Vulnerability in the Oracle Service Fulfillment Manager product of Oracle E-Business Suite (component: Fulfillment Engine). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Service Fulfillment Manager. Successful attacks of this vulnerability can result in takeover of Oracle Service Fulfillment Manager. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).

Affected (1)

Oracle
1 product
Service Fulfillment Manager
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Service Fulfillment Manager
From 12.2.3 to 12.2.15

Related CWEs

CWE-269
Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (1)

Source: secalert_us@oracle.com
Vendor Advisory

Timeline

No history available yet.