CVE-2026-60782
CriticalCVSS 9.8Summary
Vulnerability in Oracle Payments (File Transmission component) versions 12.2.3-12.2.15. Easily exploitable by unauthenticated attacker with network access via HTTP, allowing takeover of the system. CVSS score 9.8.
Risk Assessment
Full takeover of Oracle Payments can lead to compromise of confidentiality, integrity, and availability of data, posing a critical threat to the organization.
Recommendation
Apply Oracle patches immediately for versions 12.2.3-12.2.15. Restrict network access to HTTP service to trusted hosts only.
Original NVD description (English source)
Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Payments. Successful attacks of this vulnerability can result in takeover of Oracle Payments. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).