CVE-2026-60723 in Data Integrator
Summary
by MITRE • 07/22/2026
Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Market Place). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Data Integrator executes to compromise Oracle Data Integrator. While the vulnerability is in Oracle Data Integrator, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Data Integrator accessible data as well as unauthorized access to critical data or complete access to all Oracle Data Integrator accessible data. CVSS 3.1 Base Score 8.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N).
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Analysis
by VulDB Data Team • 07/22/2026
This vulnerability resides within Oracle Data Integrator, a component of Oracle Fusion Middleware that operates within the Market Place framework. The affected versions 12.2.1.4.0 and 14.1.2.0.0 represent critical security gaps that enable attackers with minimal privileges to compromise the entire Oracle Data Integrator environment. The vulnerability's exploitability score of 8.4 on the CVSS 3.1 scale indicates a high-severity threat where an attacker with logon access to the underlying infrastructure can successfully compromise the system. This represents a significant security risk as it allows attackers to gain unauthorized access to critical data and system resources through what appears to be a lateral movement attack vector.
The technical flaw manifests in the insufficient access controls and authentication mechanisms within the Oracle Data Integrator component, enabling privilege escalation from low-privileged user accounts to full system compromise. This vulnerability operates at the infrastructure level where Oracle Data Integrator executes, making it particularly dangerous as attackers can leverage their initial access to move laterally through the system and gain broader access than initially intended. The CVSS vector AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N indicates that local access is required with low attack complexity, requiring only low privilege levels, no user interaction, but with a scope change that affects additional products beyond the primary target. This scope change aspect demonstrates how vulnerabilities in one component can cascade into broader system compromise.
The operational impact of this vulnerability extends far beyond the immediate Oracle Data Integrator environment, as successful exploitation can result in unauthorized creation, deletion, or modification of critical data within the system. Attackers can potentially access all Oracle Data Integrator accessible data with complete read and write privileges, effectively undermining the confidentiality and integrity of sensitive information processed through the data integration framework. The vulnerability's potential to affect additional products through scope change aligns with ATT&CK technique T1078 for valid accounts and T1566 for social engineering, as it leverages legitimate access to expand system compromise. Organizations using these vulnerable versions face significant risk of data breaches and unauthorized modifications that could impact business continuity and regulatory compliance.
Organizations should prioritize immediate patching of affected Oracle Data Integrator versions 12.2.1.4.0 and 14.1.2.0.0 to prevent exploitation of this vulnerability. Security teams must implement additional access controls and monitoring around the Oracle Data Integrator environment, particularly focusing on privilege escalation detection. The vulnerability's classification under CWE-284 (Improper Access Control) and its alignment with ATT&CK framework techniques emphasize the need for comprehensive security posture improvements including network segmentation, privileged account management, and continuous monitoring of system access patterns. Organizations should also conduct thorough risk assessments to identify potential lateral movement paths that could be exploited through this vulnerability, ensuring that remediation efforts address both immediate threats and broader security architecture weaknesses.