Oracle Advanced Collections vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Oracle Advanced Collections: 1 record(s), with affected versions and fixes.
cpe:2.3:a:oracle:advanced_collections

CVE-2026-60989 High · 8.8 CWE-269 Jul 21, 2026

Improper Privilege Management in Oracle Advanced Collections

Vulnerability in the Oracle Advanced Collections product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced Collections. Successful attacks of this vulnerability can result in takeover of Oracle Advanced Collections. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).