CVE-2026-60891

LOW 1.9

CVSS Score

1.9

EPSS Score

0.0%

EPSS Percentile

0th

Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Work in Process executes to compromise Oracle Work in Process. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Work in Process accessible data. CVSS 3.1 Base Score 1.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N).

Vendor	oracle corporation
Product	oracle work in process
Published	Jul 21, 2026

Stay Ahead of the Next One

Get instant alerts for oracle corporation oracle work in process

Be the first to know when new low vulnerabilities affecting oracle corporation oracle work in process are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N

Attack Vector

Local

Attack Complexity

High

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Affected Versions

Oracle Corporation / Oracle Work in Process

12.2.3 ≤ 12.2.15

References

NVD ↗ CVE.org ↗ EPSS Data ↗

oracle.com: https://www.oracle.com/security-alerts/cpujul2026.html