CVE-2026-60913

LOW
INFO Priority: 0.00 BB Relevance: 14/100
Published: 2026-07-21 Modified: 2026-10-24 First seen: 2026-10-29 Status: active

Attack Surface

No Interaction

CVSS Vector Breakdown

AV: Local
AC: High
PR: High
UI: None
S: Unchanged
C: Low
I: None
A: None

Description

Vulnerability in the Oracle Property Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Property Manager executes to compromise Oracle Property Manager. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Property Manager accessible data. CVSS 3.1 Base Score 1.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N).

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
oracle property_manager 12.2.3 – 12.2.15

References & Advisories (1)

Bug Bounty Relevance

14 / 100
✓ No user interaction

CVSS Score

1.9 / 10.0 v3.1
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N

EPSS — Exploitation Probability

0.14%
Raw Score 0.001390
Percentile 3.3%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00139
2026-10-28
0.00139

Intelligence Sources

nvd ref →