This vulnerability affects Oracle Universal Work Queue component of Oracle E-Business Suite, specifically versions 12.2.3 through 12.2.15. It requires a high privileged attacker with network access via HTTP and no user interaction. The vulnerability is difficult to exploit but can lead to full compromise of the Oracle Universal Work Queue, impacting confidentiality, integrity, and availability. The CVSS vector indicates network attack vector, high attack complexity, high privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. Oracle's July 2026 Critical Patch Update advisory references this vulnerability but does not explicitly confirm patch availability or remediation status for this specific issue.

Successful exploitation can result in complete takeover of the Oracle Universal Work Queue, affecting confidentiality, integrity, and availability of the system. This could allow an attacker with high privileges and network access to compromise the affected component, potentially disrupting business processes relying on this queue.

Oracle's advisory strongly recommends applying Critical Patch Updates without delay to address vulnerabilities. However, for CVE-2026-60701 specifically, no explicit patch or remediation level is confirmed in the advisory. Organizations should monitor Oracle's official security alerts for patch availability and apply updates promptly once released. Until then, ensure that only trusted, high privileged users have network access to the Oracle Universal Work Queue over HTTP to reduce exposure.