CVE-2026-60338

Received Received - Intake

Privilege Escalation in Oracle Project Manufacturing

Publication date: 2026-07-21

Last updated on: 2026-07-21

Assigner: Oracle

Description

Vulnerability in the Oracle Project Manufacturing product of Oracle E-Business Suite (component: PJM Command Center). The supported version that is affected is V16. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Project Manufacturing executes to compromise Oracle Project Manufacturing. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Project Manufacturing accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Project Manufacturing. CVSS 3.1 Base Score 3.6 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-21

Last Modified

2026-07-21

Generated

2026-07-22

AI Q&A

2026-07-22

EPSS Evaluated

N/A

NVD

CVE-2026-60338

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	project_manufacturing	16

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle Project Manufacturing (component: PJM Command Center) within Oracle E-Business Suite. It affects version V16 and allows a low-privileged attacker with system access to potentially modify or delete data and cause partial service disruption. The attack requires local access and is considered difficult to exploit.

Detection Guidance

Detection requires checking for unauthorized access or modifications in Oracle Project Manufacturing. Monitor logs for unusual activity in the PJM Command Center component. No specific commands are provided in the context.

Impact Analysis

If exploited, this vulnerability could allow unauthorized changes to your Oracle Project Manufacturing data, leading to data integrity issues. It may also cause partial service outages, disrupting operations. However, the impact is limited due to the low base CVSS score and required local access.

Mitigation Strategies

Apply Oracle's security patches for Oracle Project Manufacturing V16. Restrict user privileges to minimize access. Monitor for partial denial of service attempts. Review and update access controls for the PJM Command Center.

Hi! I’m here to help you understand CVE-2026-60338. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70