CVE-2026-60804

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle E-Business Intelligence versions 12.2.3 through 12.2.15

Description An issue exists in the Definition component of the Oracle E-Business Intelligence product. A high privileged attacker with network access via HTTP can compromise the system, provided there is human interaction from a person other than the attacker. Successful exploitation can lead to unauthorized update, insert, or delete access to certain accessible data within Oracle E-Business Intelligence.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.