Oracle APEX (CVE-2026-60630) (July 2026 CPU)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(330303);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/07/28");

  script_cve_id("CVE-2026-60630");
  script_xref(name:"IAVA", value:"2026-A-0741");

  script_name(english:"Oracle APEX (CVE-2026-60630) (July 2026 CPU)");

  script_set_attribute(attribute:"synopsis", value:
"The remote host is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"The remote host is affected by a vulnerability in Oracle APEX (component: Installation) as referenced in the
July 2026 Oracle Critical Patch Update (CPU) advisory.

  - Vulnerability in the Oracle APEX product (component: Installation). Easily exploitable vulnerability allows
    low privileged attacker with logon to the infrastructure where Oracle APEX executes to compromise Oracle
    APEX. Successful attacks of this vulnerability can result in unauthorized access to critical data or
    complete access to all Oracle APEX accessible data. (CVE-2026-60630)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://www.oracle.com/docs/tech/security-alerts/cpujul2026csaf.json");
  script_set_attribute(attribute:"see_also", value:"https://www.oracle.com/security-alerts/cpujul2026.html");
  script_set_attribute(attribute:"solution", value:
"Apply the appropriate patch according to the July 2026 Oracle Critical Patch Update advisory.");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:S/C:C/I:N/A:N");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-60630");

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/07/21");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/07/21");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/07/28");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:oracle:application_express");
  script_set_attribute(attribute:"stig_severity", value:"I");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Web Servers");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("oracle_apex_web_detect.nbin");
  script_require_ports("Services/www", 443);

  exit(0);
}

include('vcf.inc');
include('http.inc');

var port = get_http_port(default:443);

var app_info = vcf::get_app_info(app:'Oracle Application Express (APEX)', port:port, webapp:TRUE);

vcf::check_granularity(app_info:app_info, sig_segments:3);

var constraints = [
  { 'min_version':'26.1.0', 'fixed_version':'26.1.2', 'fixed_display':'26.1.2 Bundle Patch or later' }
];

vcf::check_version_and_report(
  app_info:app_info,
  constraints:constraints,
  severity:SECURITY_WARNING
);