CVE-2026-60630

{
  "id": "CVE-2026-60630",
  "sourceIdentifier": "[email protected]",
  "published": "2026-07-21T22:18:03.627",
  "lastModified": "2026-10-24T18:10:00.163",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Vulnerability in Oracle APEX (component: Installation).  Supported versions that are affected are 24.1, 24.2 and  26.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle APEX executes to compromise Oracle APEX.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle APEX accessible data. CVSS 3.1 Base Score 5.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad en Oracle APEX (componente: Instalación). Las versiones compatibles que están afectadas son 24.1, 24.2 y 26.1. Una vulnerabilidad fácilmente explotable permite a un atacante con pocos privilegios y con inicio de sesión en la infraestructura donde se ejecuta Oracle APEX comprometer Oracle APEX. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle APEX. Puntuación base CVSS 3.1 de 5.5 (Impactos en la confidencialidad). Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Oracle Corporation",
          "product": "Oracle APEX",
          "versions": [
            {
              "version": "24.1",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "24.2",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "26.1",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
          "baseScore": 5.5,
          "baseSeverity": "MEDIUM",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-08-01T03:56:23.711155Z",
          "id": "CVE-2026-60630",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-284"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:oracle:apex:24.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "137641FC-136A-43F7-8C49-1322726486CC"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:oracle:apex:24.2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "1F18D469-3619-4E0E-9996-91994209A086"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:oracle:apex:26.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "FFC2552A-FC73-4FBD-8218-0BE8B75F5BEB"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.oracle.com/security-alerts/cpujul2026.html",
      "source": "[email protected]",
      "tags": [
        "Vendor Advisory"
      ]
    }
  ]
}