Skip to content
Threat Feed

Tag

Ebusiness Suite

5 briefs RSS
high threat

CVE-2026-46837 - Oracle Flow Manufacturing SQL Injection Vulnerability

CVE-2026-46837 is a SQL injection vulnerability in Oracle Flow Manufacturing within Oracle E-Business Suite versions 12.2.9 through 12.2.15, allowing a low-privileged attacker with network access to potentially take over the application.

Flow Manufacturing +1 cve sql-injection oracle ebusiness-suite
2r 1t 1c
medium advisory

CVE-2026-46828 - Oracle Payroll Vulnerability Allows Unauthorized Data Access and Modification

CVE-2026-46828 is an easily exploitable vulnerability in Oracle Payroll versions 12.2.3-12.2.15, allowing a low-privileged attacker with network access via HTTP to perform unauthorized creation, deletion, or modification of critical payroll data, as well as gain unauthorized access to sensitive information.

Payroll cve oracle ebusiness suite rce
2r 1t 1c
medium advisory

CVE-2026-46821 - Oracle E-Business Suite Financials Common Modules Unauthorized Data Access

CVE-2026-46821 is an easily exploitable vulnerability in Oracle Financials Common Modules of Oracle E-Business Suite versions 12.2.3-12.2.15, allowing a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data.

E-Business Suite +1 cve oracle ebusiness suite financials data access
2r 1t 1c
medium advisory

CVE-2026-46820: Oracle Financials Common Modules Vulnerability in E-Business Suite

CVE-2026-46820 is a vulnerability in Oracle Financials Common Modules within Oracle E-Business Suite versions 12.2.3-12.2.15, allowing a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data and modify some data, resulting in a confidentiality and integrity impact.

E-Business Suite +1 cve oracle ebusiness suite financials
2r 1t 1c
critical advisory

CVE-2026-46817 - Oracle Payments Unauthenticated Remote Takeover via HTTP

CVE-2026-46817 is a critical vulnerability in Oracle Payments component of Oracle E-Business Suite versions 12.2.3 through 12.2.15, allowing an unauthenticated attacker with network access via HTTP to compromise the application and potentially achieve complete takeover.

E-Business Suite +1 cve oracle ebusiness suite rce unauthenticated privilege-escalation
2r 1c