8.8
High
CVE-2026-60678 Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations)
Description
Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle General Ledger. Successful attacks of this vulnerability can result in takeover of Oracle General Ledger. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Oracle General Ledger 12.2 | 12.2.3 → 12.2.15 | No fix stated |
Other CVEs of Oracle General Ledger
The 11 CVEs of Oracle General Ledger →
CVE-2026-87358
Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations)
7.1
High
CVE-2026-101820
Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: ADADMIN)
7.5
High
CVE-2026-101819
Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations)
6.5
Medium
CVE-2026-70803
Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations)
7.6
High