CVE-2026-60368

The record

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle Platform Security for Java. Successful attacks of this vulnerability can result in takeover of Oracle Platform Security for Java. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Affected packages

Related vulnerabilities

• CVE-2026-11325 Description Cloudflare was recently notified by external researchers of vulnerabilities… CWE-1104
• CVE-2026-16634 TOML::XS versions before 0.06 for Perl bundle an unsupported and vulnerable version of… CWE-1104
• CVE-2026-56580 HCL MyCloud was affected by Using Components with Known Vulnerability ( IIS Server ). CWE-1104
• CVE-2026-3031 Image::EPEG versions through 0.15 for Perl embeds an unsupported version of the Epeg… CWE-1104
• CVE-2024-23581 The HCL Traveler for Microsoft Outlook libraries are being flagged as potentially… CWE-1104
• CVE-2026-21821 The HCL BigFix SCM Reporting site contains an outdated and unsupported version of the… CWE-1104
• CVE-2026-41468 Beghelli Sicuro24 SicuroWeb embeds AngularJS 1.5.2, an end-of-life component containing… CWE-1104
• CVE-2025-55277 HCL Aftermarket DPC is affected by Use of Vulnerable/Outdated Versions vulnerability… CWE-1104