This vulnerability affects the Collaboration History component of Oracle Supply Chain Trading Connector within Oracle E-Business Suite, specifically versions 12.2.3 to 12.2.15. It is exploitable remotely over HTTP by an attacker with low privileges, enabling unauthorized access to sensitive data managed by the product. The CVSS vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and high confidentiality impact without integrity or availability impact. Oracle's July 2026 Critical Patch Update advisory lists this vulnerability among many others but does not explicitly confirm patch availability or remediation details for this specific CVE in the provided excerpt.

Successful exploitation can lead to unauthorized access to critical or all data accessible by Oracle Supply Chain Trading Connector, compromising confidentiality. There is no reported impact on data integrity or availability. The vulnerability is remotely exploitable over HTTP by an attacker with low privileges, increasing the risk of data exposure in affected environments.

Oracle's July 2026 Critical Patch Update advisory includes this vulnerability in its list, implying patches may be available. However, the provided advisory content does not explicitly confirm patch availability or remediation instructions for CVE-2026-60812. Users should consult the official Oracle Critical Patch Update advisory at https://www.oracle.com/security-alerts/cpujul2026.html for the latest patch information and apply relevant updates promptly. Until confirmed patched, restrict network access to the Oracle Supply Chain Trading Connector service to trusted users only.