CVE-2026-60370

The record

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Platform Security for Java. Successful attacks of this vulnerability can result in takeover of Oracle Platform Security for Java. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).

Affected packages

Related vulnerabilities

• CVE-2026-119715 NocoDB before 2026.08.0 contains a clickjacking vulnerability that allows any origin to… CWE-1021
• CVE-2026-20942 Improper restriction of rendered ui layers or frames in Microsoft Edge (Chromium-based)… CWE-1021
• CVE-2026-67079 HCL BigFix AEX is affected by a Clickjacking vulnerability, which could allow an attacker… CWE-1021
• CVE-2026-114125 Storybook is a frontend workshop for building user interface components and pages in… CWE-1021
• CVE-2026-109290 Open WebUI from 0.11.1 before 0.11.4 contains a stored cross-site scripting vulnerability… CWE-1021
• CVE-2026-87655 Clickjacking in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote… CWE-1021
• CVE-2026-87538 Clickjacking in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker… CWE-1021
• CVE-2026-87486 Clickjacking in TrustedWebActivities in Google Chrome on on Android prior to… CWE-1021