Real-Time Threat Intelligence & CVE Tracker

Oracle E-Business Suite contains an improper privilege management vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Payments. Successful attacks of this vulnerability can result in takeover of Oracle Payments.

Vendor: Oracle Fix: Vendor Patch / Mitigation Available

Analyze Advisory

Vulnerability Severity Distribution

2 total

Top Targeted Vendors & Stacks

Ranked

#1 Microsoft 18 #2 Hcltech 13 #3 Cisco 10 #4 Linux 3 #5 Fortinet 3 #6 Langflow 3 #7 Oracle 3 #8 SimpleHelp 3

Common Attack Vectors (Top CWEs)

CWE-89 SQL Injection (SQLi) CWE-79 Cross-Site Scripting (XSS) CWE-862 Missing Authorization CWE-94 Code Injection (RCE) CWE-287 Improper Authentication CWE-22 Path Traversal

Latest Security Vulnerabilities

Explore Feed

CVE-2026-11866 MEDIUM 5.4 2 months ago

The Appointment Booking Plugin WordPress plugin before 5

The Appointment Booking Plugin WordPress plugin before 5.6.3 does not validate a CSRF nonce on several state-changing actions handled by its central request dispatcher, allowing attackers to perform privileged actions, such as overwriting the booking-form configuration or disconnecting the connected payment gateway, via Cross-Site Request Forgery against a logged-in administrator.

Vendor: WordPress Plugin View Details

CVE-2026-46817 CRITICAL 9.8 Fix: Vendor Patch / Mitigation Available 2 months ago