THREATOPS

THREAT OPS › CVEs › CVE-2026-46817

CVE-2026-46817 — Oracle E-Business Suite Improper Privilege Management Vulnerability

CISA KEVExploited: confirmedOracle

Oracle E-Business Suite contains an improper privilege management vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Payments. Successful attacks of this vulnerability can result in takeover of Oracle Payments.

Vulnerability details

Affected productsE-Business Suite
KEV remediation due2026-07-18

Related reporting

July 2026 CVE Landscaperecordedfuture
[CISA KEV] CVE-2026-46817 — Oracle E-Business Suite: Oracle E-Business Suite Improper Privilege Management Vulnerabilitycisa_kev
6th July – Threat Intelligence Reportcheckpoint_research
June 2026 CVE Landscaperecordedfuture