CVE-2026-60734

Undergoing Analysis Undergoing Analysis - In Progress

Oracle Trading Community Party Search UI Takeover

Publication date: 2026-07-21

Last updated on: 2026-07-24

Assigner: Oracle

Description

Vulnerability in the Oracle Trading Community product of Oracle E-Business Suite (component: Party Search UI). Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Trading Community. Successful attacks of this vulnerability can result in takeover of Oracle Trading Community. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-21

Last Modified

2026-07-24

Generated

2026-08-11

AI Q&A

2026-07-22

EPSS Evaluated

2026-08-10

NVD

CVE-2026-60734

EUVD

EUVD-2026-47071

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	trading_community	From 12.2.3 (inc) to 12.2.12 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle Trading Community within Oracle E-Business Suite. It allows a high-privileged attacker with network access to compromise the system via HTTP. Successful exploitation could lead to a complete takeover of Oracle Trading Community.

Detection Guidance

Detection requires checking for Oracle E-Business Suite versions 12.2.3 to 12.2.12 with the Oracle Trading Community component exposed to HTTP. Verify installed versions and exposed services. No specific commands are provided in the context.

Impact Analysis

If exploited, an attacker could gain full control over Oracle Trading Community, potentially leading to unauthorized access, data breaches, or disruption of services. This could affect sensitive business or customer data.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, which may violate compliance requirements under GDPR, HIPAA, or other regulations. Organizations could face legal penalties or reputational damage.

Mitigation Strategies

Apply Oracle's security patches for the affected versions immediately. Restrict network access to the Oracle Trading Community component via HTTP. Ensure only trusted users have high privileges.

Hi! I’m here to help you understand CVE-2026-60734. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70