CVE-2026-46817
CISA KEV
ACT NOW
Priority: 0.00
BB Relevance:
2/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
Oracle E-Business Suite contains an improper privilege management vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Payments. Successful attacks of this vulnerability can result in takeover of Oracle Payments.
CISA Known Exploited Vulnerability
Vendor / Product
Oracle — E-Business Suite
Date Added
2026-07-15
Remediation Due
2026-07-18
https://www.oracle.com/security-alerts/cspumay2026.html ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-46817
Affected Software (1)
| Vendor | Product | Version |
|---|---|---|
| oracle | e-business_suite | 12.2.3 – 12.2.15 |
References & Advisories (2)
Vendor Advisory
US Government Resource