CVE-2026-60785
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk27th percentile - higher than 27% of all known CVEs
Summary
Vulnerability in Oracle iReceivables (component: AR Web Utilities) versions 12.2.3-12.2.15. Difficult to exploit, allows an unauthenticated attacker with network access via HTTP to take over the system.
Risk Assessment
A successful attack can lead to full compromise of Oracle iReceivables, impacting confidentiality, integrity, and availability.
Recommendation
Apply the patch from the Oracle Critical Patch Update for Oracle E-Business Suite.
Other vulnerabilities in Oracle iReceivables
See all- CVE-2017-3555High
Vulnerability in the Oracle iReceivables component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle iReceivables. Successful attacks can lead to hanging or frequently repeatable crashes (complete DOS).
- CVE-2026-60783High
A vulnerability in Oracle iReceivables (Oracle E-Business Suite, component: AR Web Utilities) versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to take over Oracle iReceivables. CVSS 8.8.
- CVE-2026-60732High
Vulnerability in Oracle iReceivables (AR Web Utilities component) in Oracle E-Business Suite versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.
Original NVD description (English source)
Vulnerability in the Oracle iReceivables product of Oracle E-Business Suite (component: AR Web Utilities). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iReceivables. Successful attacks of this vulnerability can result in takeover of Oracle iReceivables. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).