Main Vulnerability Database Vulnerabilities #VU160339

Improper input validation in Oracle E-Business Suite and Oracle Work in Process - CVE-2026-60896

Published: November 7, 2026

Vulnerability identifier: #VU160339

CSH Severity: Low

CVSS v4: 2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-60896

CWE-ID: CWE-125

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local authenticated user to read memory contents or crash the application.

The vulnerability exists due to improper input validation within the Internal Operations component in Oracle Work in Process in Oracle E-Business Suite. A local authenticated user can exploit this vulnerability to read memory contents or crash the application.

Affected software

Oracle E-Business Suite
Oracle Work in Process

How to mitigate CVE-2026-60896

Install updates from vendor's website.

External References

https://www.oracle.com/security-alerts/cpujul2026.html

Related Security Bulletins