This vulnerability exists in the Command Line - RapidClone component of Oracle Applications Manager within Oracle E-Business Suite. The flaw permits an unauthenticated attacker with infrastructure logon access to compromise Oracle Applications Manager, potentially resulting in complete takeover. The CVSS 3.1 base score is 8.4, indicating high severity with high impact on confidentiality, integrity, and availability. Affected versions explicitly include 12.2.3 through 12.2.15. The vendor advisory from Oracle's July 2026 Critical Patch Update references this vulnerability but does not explicitly confirm patch availability or remediation status for this specific issue. No known exploits in the wild have been reported.

An attacker with logon access to the infrastructure hosting Oracle Applications Manager can exploit this vulnerability to fully compromise the application. This results in complete loss of confidentiality, integrity, and availability of Oracle Applications Manager, potentially allowing full control over the application and its functions.

The Oracle July 2026 Critical Patch Update advisory lists numerous security patches but does not explicitly confirm a patch or fix for CVE-2026-60763. Customers are strongly advised to review the Oracle advisory at https://www.oracle.com/security-alerts/cpujul2026.html for the latest patch availability and apply all relevant security updates promptly. Until an official patch or workaround is confirmed, restrict logon access to the infrastructure hosting Oracle Applications Manager to trusted personnel only and monitor for any suspicious activity. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.