CVE-2026-60732
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
Vulnerability in Oracle iReceivables (AR Web Utilities component) in Oracle E-Business Suite versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.
Risk Assessment
Risk of loss of confidentiality and integrity of critical business data managed by Oracle iReceivables.
Recommendation
Apply the latest Oracle security patches for Oracle E-Business Suite (versions 12.2.3-12.2.15).
Other vulnerabilities in Oracle iReceivables
See all- CVE-2017-3555High
Vulnerability in the Oracle iReceivables component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle iReceivables. Successful attacks can lead to hanging or frequently repeatable crashes (complete DOS).
- CVE-2026-60785High
Vulnerability in Oracle iReceivables (component: AR Web Utilities) versions 12.2.3-12.2.15. Difficult to exploit, allows an unauthenticated attacker with network access via HTTP to take over the system.
- CVE-2026-60783High
A vulnerability in Oracle iReceivables (Oracle E-Business Suite, component: AR Web Utilities) versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to take over Oracle iReceivables. CVSS 8.8.
Original NVD description (English source)
Vulnerability in the Oracle iReceivables product of Oracle E-Business Suite (component: AR Web Utilities). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iReceivables. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle iReceivables accessible data as well as unauthorized access to critical data or complete access to all Oracle iReceivables accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).