Low severity · published Jul 21, 2026
CVE-2026-60896
Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations)
3.6
CVSS
0.1%
EPSS
No
On KEV
Description
Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Work in Process executes to compromise Oracle Work in Process. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Work in Process accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Work in Process. CVSS 3.1 Base Score 3.6 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L).
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L
Attack vector
Local
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
None
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 2% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OW
Oracle Work in Process · Oracle Corporation
12.2.3 through 12.2.15 · source: vendor
WI
Work IN Process · Oracle
12.2.3 through 12.2.15 · source: NVD
Affected product
OW
Oracle Work in Process
Oracle Corporation
More from Oracle Work in Process
9.8
CVE-2026-60880
Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations)
8.8
CVE-2026-62462
Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations)
8.1
CVE-2026-83477
Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Workbenches)
8.1
CVE-2026-62451
Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations)
7.6
CVE-2026-60886
Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations)