CVE-2026-60737

Name of the Vulnerable Software and Affected Versions Oracle Web Services Manager version 12.2.1.4.0 Oracle Web Services Manager version 14.1.2.0.0

Description An issue exists in the Web Services Security component of the Oracle Web Services Manager. An unauthenticated attacker with network access via HTTP can compromise the system. Successful exploitation allows unauthorized access to critical data, as well as the unauthorized creation, deletion, or modification of all data accessible by the Oracle Web Services Manager.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.