Critical Flaw in Oracle E-Business Suite is Being Exploited
NEOSEC enrichment — no mirror of the original source
Last week, threat intelligence firm Defused reported that a known critical vulnerability in Oracle E-Business Suite is being actively exploited. CVE-2026-46817 is an unauthorized HTTP takeover issue affecting the file transmission component
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Editorial context in the original issue
The SANS NewsBites issue carries commentary by: Neely.
Linked advisories
- CVE-2026-46817Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2…
- CVE-2026-46817Oracle E-Business Suite — Oracle E-Business Suite Improper Privilege Management Vulnerability
- CVE-2026-46817Oracle E-Business Suite: Mehrere Schwachstellen
Affected vendors and products
More on E-Business
Other advisories
- CriticalCVE-2026-101706Oracle E-Business Suite: Mehrere Schwachstellen
- HighCVE-2026-101690Oracle E-Business Suite Integrated SOA Gateway: unzureichende Zugriffskontrolle
- HighCVE-2026-101689Oracle E-Business Suite Integrated SOA Gateway: unzureichende Zugriffskontrolle
- HighCVE-2026-101688Oracle E-Business Suite Integrated SOA Gateway: unzureichende Zugriffskontrolle
- HighCVE-2026-101687Oracle E-Business Suite Integrated SOA Gateway: Sicherheitslücke
- HighCVE-2026-101686Oracle E-Business Suite Integrated SOA Gateway: Sicherheitslücke
- HighCVE-2026-101685Oracle E-Business Suite Integrated SOA Gateway: Sicherheitslücke
- HighCVE-2026-101684Oracle E-Business Suite Integrated SOA Gateway: Denial of Service
Other news entries
- Angriffsversuche auf junge Lücke in Oracle E-Business-SuiteNewsheise Security
- Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security PatchNewsThe Hacker News
- Hackers now scanning systems for recently-patched Oracle flawNewsBleepingComputer
- Oracle patches 1295 security vulnerabilities in October, including six scoring 10.0NewsCSO Online
- NCSC-2026-0442 [1.00] [M/H] Kwetsbaarheden verholpen in Oracle E-Business SuiteNewsNCSC-NL
- Oracle E-Business Suite: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Oracle’s September patches put Fusion Middleware back in the hot seatNewsCSO Online
- NCSC-2026-0376 [1.00] [M/H] Kwetsbaarheden verholpen in Oracle E-Business SuiteNewsNCSC-NL
ID