CVE-2026-60678

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle General Ledger versions 12.2.3 through 12.2.15

Description A flaw in the Internal Operations component allows a low privileged attacker with network access via SOAP (Simple Object Access Protocol, a messaging protocol for exchanging structured information) to compromise the system. Successful exploitation can lead to a complete takeover of the Oracle General Ledger.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.