Oracle E-Business Suite Vulnerability
Oracle E-Business Suite contains an improper privilege management vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Payments. Successful attacks of this vulnerability can result in takeover of Oracle Payments.
CVSS Score
9.8
CRITICAL
Published
15 Jul 2026 00:00
Modified
N/A
Vendor
Oracle
Product
E-Business Suite
Source
CIRCL
Affected Versions
Fix
Vendor Patch / Mitigation Available
Weaknesses (CWE)
CWE-269
CWE-287
CWE-306
Affected Systems
Oracle
E-Business Suite
Oracle
E-Business Suite
PeopleSoft Enterprise PeopleTools
WebLogic Server
External Links
KEV Status
Known Exploited Vulnerability