Critical 1 exploited CVE WID-SEC-2026-1722 12 CVEs

Oracle E-Business Suite: Mehrere Schwachstellen

Published May 28, 2026 · Updated Jun 29, 2026 · Revision 2 · de-DE

Vendor: Oracle Product: E-Business Suite Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle E-Business Suite ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Product

Oracle E-Business Suite ist eine Sammlung geschäftlicher Anwendungen für Unternehmen.

Vulnerabilities 12

Critical 9.8

CVE-2026-46817 Exploited Public exploit EPSS 12%

Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versi…

Oracle Oracle Payments

May 28, 2026
KEV Jul 15, 2026
Critical 9.9

CVE-2026-46822

Vulnerability in the Oracle iAssets product of Oracle E-Business Suite (component: Internal Operations). Supported vers…

Oracle Oracle iAssets

May 28, 2026
Critical 9.9

CVE-2026-46824

Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Site Leve…

Oracle Oracle Universal Work Queue

May 28, 2026
Critical 9.1

CVE-2026-46819

Vulnerability in the Oracle Internet Procurement Connector product of Oracle E-Business Suite (component: Internal Oper…

Oracle Oracle Internet Procurement Connector

May 28, 2026
High 8.8

CVE-2026-46826

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported vers…

Oracle Oracle Payroll

May 28, 2026
High 8.8

CVE-2026-46827

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Self Service Manager). Supported ver…

Oracle Oracle Payroll

May 28, 2026
High 8.8

CVE-2026-46837

Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Security). Supported vers…

Oracle Oracle Flow Manufacturing

May 28, 2026
High 8.5

CVE-2026-46820

Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components)…

Oracle Oracle Financials Common Modules

May 28, 2026
High 8.1

CVE-2026-46828

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported vers…

Oracle Oracle Payroll

May 28, 2026
High 7.7

CVE-2026-46821

Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components)…

Oracle Oracle Financials Common Modules

May 28, 2026
High 7.7

CVE-2026-46823

Vulnerability in the Oracle Public Sector Financials (International) product of Oracle E-Business Suite (component: Aut…

Oracle Oracle Public Sector Financials (International)

May 28, 2026
High 7.4

CVE-2026-46818

Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versi…

Oracle Oracle Payments

May 28, 2026

Revision history

2026-06-29 #2
Exploit aufgenommen CVE-2026-46817
2026-05-28 #1
Initiale Fassung

References

Oracle Critical Security Patch Update Advisory - May 2026 - Appendix Oracle E-Business Suite vom 2026-05-28
https://www.oracle.com/security-alerts/cspumay2026.html#AppendixEBS
Exploit vom 2026-05-29
https://x.com/DefusedCyber