CVE-2026-60941

Name of the Vulnerable Software and Affected Versions Oracle Service Fulfillment Manager versions 12.2.3 through 12.2.15

Description A flaw in the Fulfillment Engine component allows a high privileged attacker with network access via HTTP to compromise the system. This issue can lead to unauthorized access, creation, deletion, or modification of critical data and all data accessible by the manager. Although the issue resides within the Oracle Service Fulfillment Manager, successful exploitation may significantly impact additional products due to a scope change.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.