CVE-2026-60790 in Sales Offlineالمعلومات

الملخص

بحسب MITRE • 22/07/2026

Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Sales Offline. While the vulnerability is in Oracle Sales Offline, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Sales Offline. CVSS 3.1 Base Score 8.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H).

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

مسؤول

Oracle

حجز

08/07/2026

إفشاء

22/07/2026

الاعتدال

تمت الموافقة

إدخال

VDB-381723

EPSS

0.00360

KEV

لا

النشاطات

منخفض جدًا

المصادر

Do you need the next level of professionalism?

Upgrade your account now!