CVE-2026-60960Oracle · Service_delivery_platform_number_portability
Vulnerability data via NVD (ingested)
Vulnerability in the Oracle SDP Number Portability product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle SDP Number Portability executes to compromise Oracle SDP Number Portability. While the vulnerability is in Oracle SDP Number Portability, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle SDP Number Portability. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
External references
Search for exposed instances
Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).
vuln:CVE-2026-60960product:"Oracle Service Delivery Platform Number Portability"http.html:"Service Delivery Platform Number Portability"More intel sources (5)
vuln:CVE-2026-60960vulnerabilities.cve_id: CVE-2026-60960CVE-2026-60960CVE-2026-60960"CVE-2026-60960" exploit -site:nvd.nist.gov