HIGHVulnerability

CVE-2026-60918

Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.12-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Shipping Execution. Successful attacks of this vulnerability can result in takeover of Oracle Shipping Execution. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

Properties

severity
HIGH
score
7.2
cve_id
CVE-2026-60918
vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
published_at
2026-07-21T22:18:26.923
last_modified
2026-08-06T15:28:39.340

Related Entities (6)

HAS_WEAKNESS (3)

[Weakness]Missing Authentication for Critical Function
[Weakness]Improper Privilege Management
[Weakness]Improper Access Control

DESCRIBED_BY (1)

[Source]NVD

AFFECTS_PRODUCT (2)

[Product]
[Product]

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-60918 — Ninja Signal Threat Intelligence | Ninja Signal