This vulnerability in Oracle Shipping Execution (component: Internal Operations) affects supported versions 12.2.12 to 12.2.15. It permits a high privileged attacker with network access via HTTP to compromise the system, resulting in potential takeover of Oracle Shipping Execution. The CVSS 3.1 base score is 7.2, indicating high severity with impacts on confidentiality, integrity, and availability. The vendor advisory is a general Critical Patch Update advisory listing many patched products but does not explicitly confirm patch availability or remediation status for this specific vulnerability. No known exploits in the wild are reported.

Successful exploitation can lead to complete compromise of Oracle Shipping Execution, affecting confidentiality, integrity, and availability of the system. This could allow an attacker to take over the affected component, potentially disrupting business operations and exposing sensitive data.

Oracle has released a Critical Patch Update advisory covering multiple vulnerabilities, including those in Oracle products. However, the advisory does not explicitly confirm a patch or remediation status for CVE-2026-60918. Customers should monitor the referenced Oracle Critical Patch Update advisory for updates and apply relevant patches promptly when available. Until then, no specific mitigation or workaround is confirmed. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.