Price Protection CVE-2026-60714

Oracle E-Business Suite Price Protection module (versions 12.2.3-12.2.15) contains a high-severity vulnerability allowing authenticated low-privilege users to fully compromise pricing data through read, modification, and deletion. Organizations risk pricing strategy exposure, customer contract corruption, and operational disruption and must immediately inventory affected systems and restrict access while awaiting vendor remediation.

Within 24 hours, inventory all Oracle E-Business Suite instances running versions 12.2.3 through 12.2.15 and identify those with Price Protection enabled; document network exposure paths and user populations with low-privilege credentials. Within 7 days, apply network-level access controls restricting connectivity to Price Protection systems to essential business users, disable the module in non-critical environments, and enable audit logging for all data access and modifications. Within 30 days, monitor Oracle security advisories for patch release; upon availability, test the patch in non-production environments and schedule production deployment for execution within 48 hours of validation.

No vendor-released patch identified at time of analysis. Implement network-level access restrictions to Price Protection systems via firewall segmentation; disable the module in non-critical Oracle E-Business Suite instances; apply role-based access controls to limit low-privilege user permissions; deploy real-time monitoring and alerting for unauthorized data access and modifications; maintain detailed audit logs for forensic investigation.