CVE-2026-60783
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
A vulnerability in Oracle iReceivables (Oracle E-Business Suite, component: AR Web Utilities) versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to take over Oracle iReceivables. CVSS 8.8.
Risk Assessment
Successful exploitation could lead to full compromise of the Oracle iReceivables component, impacting confidentiality, integrity, and availability.
Recommendation
Apply the latest Oracle Critical Patch Update immediately.
Other vulnerabilities in Oracle iReceivables
See all- CVE-2017-3555High
Vulnerability in the Oracle iReceivables component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle iReceivables. Successful attacks can lead to hanging or frequently repeatable crashes (complete DOS).
- CVE-2026-60785High
Vulnerability in Oracle iReceivables (component: AR Web Utilities) versions 12.2.3-12.2.15. Difficult to exploit, allows an unauthenticated attacker with network access via HTTP to take over the system.
- CVE-2026-60732High
Vulnerability in Oracle iReceivables (AR Web Utilities component) in Oracle E-Business Suite versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.
Original NVD description (English source)
Vulnerability in the Oracle iReceivables product of Oracle E-Business Suite (component: AR Web Utilities). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iReceivables. Successful attacks of this vulnerability can result in takeover of Oracle iReceivables. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).