CVE-2026-60368

HIGH

Oracle Platform Security for Java Use of Unmaintained Third Party Components Vulnerability

Generated titleSource: EIP title enrichment
STIX 2.1 vulnerability

Record summary

CVE-2026-60368 has a selected CVSS score of 8.8 (high).

Description

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle Platform Security for Java. Successful attacks of this vulnerability can result in takeover of Oracle Platform Security for Java. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Description source: GitHub Advisory

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Jul 23, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Oracle Platform Security for Java

Browse Oracle Corporation / Oracle Platform Security for Java
CVE List12.2.1.4.0affected
14.1.2.0.0affected

References

2