PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-60723 Oracle CVE debrief

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-21T22:18:12.363Z and has not been modified since then. The vulnerability in Oracle Data Integrator, specifically in the Market Place component, affects versions 12.2.1.4.0 and 14.1.2.0.0, allowing low-privileged attackers with logon to the infrastructure where Oracle Data Integrator executes to compromise Oracle Data Integrator. Successful attacks can result in unauthorized creation, deletion or modification access to critical data or all Oracle Data Integrator accessible data as well as unauthorized access to critical data or complete access to all Oracle Data Integrator accessible data. CVSS 3.1 Base Score 8.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N). Administrators and users of Oracle Data Integrator, especially those with low-privileged access, should be aware of this vulnerability and take necessary precautions. This includes reviewing and applying Oracle's security patches, restricting access to Oracle Data Integrator, and monitoring systems for suspicious activity.

Vendor
Oracle
Product
Data Integrator
CVSS
HIGH 8.4
CISA KEV
Not listed in stored evidence
Original CVE published
2026-07-21
Original CVE updated
2026-08-03
Advisory published
2026-07-21
Advisory updated
2026-08-03

Who should care

Administrators and users of Oracle Data Integrator, especially those with low-privileged access, should be aware of this vulnerability and take necessary precautions. This includes reviewing and applying Oracle's security patches, restricting access to Oracle Data Integrator, and monitoring systems for suspicious activity. Security teams and vulnerability management teams should prioritize patching and review compensating controls for exposed systems.

Technical summary

The vulnerability in Oracle Data Integrator allows low-privileged attackers with logon to the infrastructure where Oracle Data Integrator executes to compromise Oracle Data Integrator. Successful attacks can result in unauthorized creation, deletion or modification access to critical data or all Oracle Data Integrator accessible data as well as unauthorized access to critical data or complete access to all Oracle Data Integrator accessible data. The vulnerability is in the Market Place component, affecting versions 12.2.1.4.0 and 14.1.2.0.0.

Defensive priority

Oracle Data Integrator vulnerability allows low-privileged attackers to compromise the system, potentially impacting additional products.

Recommended defensive actions

  • Review and apply Oracle's security patches for Oracle Data Integrator
  • Restrict access to Oracle Data Integrator to only necessary personnel
  • Monitor Oracle Data Integrator systems for suspicious activity
  • Implement compensating controls to limit potential damage
  • Review CVE-2026-60723 CVE record for further details
  • Perform exposure review for Oracle Data Integrator deployments
  • Track exceptions and retest remediated assets

Evidence notes

The vulnerability is in Oracle Data Integrator, specifically in the Market Place component, affecting versions 12.2.1.4.0 and 14.1.2.0.0. The CVE record was published on 2026-07-21T22:18:12.363Z and has not been modified since then. There is no information available on the number of affected systems or potential impact beyond Oracle Data Integrator. Defenders should verify the presence of affected product deployments in managed environments and review official advisories for further guidance.

Official resources

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-21T22:18:12.363Z and has not been modified since then.