CVE-2026-60937: Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Labor Distribution. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Labor Distribution accessible data. in Oracle Corporation Oracle Labor Distribution
CVE-2026-60937 is a vulnerability in Oracle Labor Distribution (part of Oracle E-Business Suite) versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to perform unauthorized update, insert, or delete operations on some accessible data. The vulnerability is difficult to exploit and impacts data integrity without affecting confidentiality or availability. The CVSS 3.1 base score is 3.1, indicating low severity.
AI Analysis
Technical Summary
This vulnerability affects Oracle Labor Distribution versions 12.2.3 through 12.2.15. It permits a low privileged attacker with network access via HTTP to compromise the product by unauthorized modification of accessible data (update, insert, or delete). The attack complexity is high, and no user interaction is required. The vulnerability impacts integrity but not confidentiality or availability. There is no explicit vendor advisory stating a patch or fix specifically for this vulnerability, but it is listed in Oracle's July 2026 Critical Patch Update advisory, which contains numerous patches for Oracle products. The vendor strongly recommends applying available patches promptly.
Potential Impact
Successful exploitation can result in unauthorized modification (update, insert, or delete) of some data accessible through Oracle Labor Distribution, impacting data integrity. There is no impact on confidentiality or availability. The vulnerability is rated low severity with a CVSS score of 3.1.
Mitigation Recommendations
Oracle's July 2026 Critical Patch Update advisory includes security patches addressing multiple vulnerabilities. Although no specific patch link is provided for this CVE, Oracle recommends applying the latest security patches without delay. Customers should verify patch availability for Oracle Labor Distribution versions 12.2.3 through 12.2.15 and apply them promptly to mitigate this vulnerability.
CVE-2026-60937: Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Labor Distribution. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Labor Distribution accessible data. in Oracle Corporation Oracle Labor Distribution
Description
CVE-2026-60937 is a vulnerability in Oracle Labor Distribution (part of Oracle E-Business Suite) versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to perform unauthorized update, insert, or delete operations on some accessible data. The vulnerability is difficult to exploit and impacts data integrity without affecting confidentiality or availability. The CVSS 3.1 base score is 3.1, indicating low severity.
CVSS v3.1
Score 3.1low
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability affects Oracle Labor Distribution versions 12.2.3 through 12.2.15. It permits a low privileged attacker with network access via HTTP to compromise the product by unauthorized modification of accessible data (update, insert, or delete). The attack complexity is high, and no user interaction is required. The vulnerability impacts integrity but not confidentiality or availability. There is no explicit vendor advisory stating a patch or fix specifically for this vulnerability, but it is listed in Oracle's July 2026 Critical Patch Update advisory, which contains numerous patches for Oracle products. The vendor strongly recommends applying available patches promptly.
Potential Impact
Successful exploitation can result in unauthorized modification (update, insert, or delete) of some data accessible through Oracle Labor Distribution, impacting data integrity. There is no impact on confidentiality or availability. The vulnerability is rated low severity with a CVSS score of 3.1.
Mitigation Recommendations
Oracle's July 2026 Critical Patch Update advisory includes security patches addressing multiple vulnerabilities. Although no specific patch link is provided for this CVE, Oracle recommends applying the latest security patches without delay. Customers should verify patch availability for Oracle Labor Distribution versions 12.2.3 through 12.2.15 and apply them promptly to mitigate this vulnerability.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- oracle
- Date Reserved
- 2026-07-08T15:51:55.603Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
- Vendor Advisory Urls
- [{"url":"https://www.oracle.com/security-alerts/cpujul2026.html","vendor":"Oracle"}]
Threat ID: 6a5fee1c9c2644c7f8d5c878
Added to database: 07/21/2026, 22:09:32 UTC
Last enriched: 07/22/2026, 02:53:08 UTC
Last updated: 07/22/2026, 02:53:08 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.