CVE Intelligence

Oracle Pasta vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Oracle Pasta: 1 record(s), with affected versions and fixes.

CVE-2026-60775 Medium · 6.7 CWE-284 Jul 21, 2026
Improper Access Control in Oracle E-business Suite
Vulnerability in the Pasta product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Pasta executes to compromise Pasta. Successful attacks of this vulnerability can result in takeover of Pasta. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).