Detections
Analytics

Oracle E-Business Suite (August 2026 CSPU)

critical Nessus Plugin ID 338747

Synopsis

The remote host is affected by multiple vulnerabilities

Description

The versions of Oracle E-Business Suite installed on the remote host are affected by multiple vulnerabilities as referenced in the August 2026 CSPU advisory.

 - Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission).
 Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Payments. Successful attacks of this vulnerability can result in takeover of Oracle Payments. (CVE-2026-60782)

 - Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via SMTP to compromise Oracle Workflow. Successful attacks of this vulnerability can result in takeover of Oracle Workflow.
 (CVE-2026-70926)

 - Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Scripting. Successful attacks of this vulnerability can result in takeover of Oracle Scripting. (CVE-2026-60976)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Apply the appropriate patch according to the August 2026 Oracle Critical Security Patch Update advisory.

See Also

https://www.oracle.com/docs/tech/security-alerts/cspuaug2026csaf.json

https://www.oracle.com/security-alerts/cspuaug2026.html

Plugin Details

Severity: Critical

ID: 338747

File Name: oracle_e-business_cspu_aug_2026.nasl

Version: 1.1

Type: Remote

Family: Misc.

Published: 8/21/2026

Updated: 8/21/2026

Configuration: Enable thorough checks (optional)

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5

Percentile: 93.76

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2026-60782

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 8.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

CVSS Score Source: CVE-2026-60782

Vulnerability Information

CPE: cpe:/a:oracle:e-business_suite

Required KB Items: Oracle/E-Business/Version, Oracle/E-Business/patches/installed

Exploit Ease: No known exploits are available

Patch Publication Date: 8/18/2026

Vulnerability Publication Date: 8/18/2026

Reference Information

CVE: CVE-2026-60693, CVE-2026-60748, CVE-2026-60759, CVE-2026-60769, CVE-2026-60781, CVE-2026-60782, CVE-2026-60830, CVE-2026-60976, CVE-2026-61139, CVE-2026-61198, CVE-2026-61296, CVE-2026-61306, CVE-2026-61319, CVE-2026-61331, CVE-2026-61340, CVE-2026-62448, CVE-2026-62449, CVE-2026-62450, CVE-2026-62458, CVE-2026-62462, CVE-2026-62475, CVE-2026-62491, CVE-2026-62540, CVE-2026-62599, CVE-2026-62600, CVE-2026-62601, CVE-2026-62605, CVE-2026-62607, CVE-2026-70680, CVE-2026-70681, CVE-2026-70686, CVE-2026-70687, CVE-2026-70690, CVE-2026-70692, CVE-2026-70694, CVE-2026-70695, CVE-2026-70696, CVE-2026-70699, CVE-2026-70700, CVE-2026-70701, CVE-2026-70702, CVE-2026-70704, CVE-2026-70706, CVE-2026-70707, CVE-2026-70708, CVE-2026-70710, CVE-2026-70713, CVE-2026-70718, CVE-2026-70720, CVE-2026-70722, CVE-2026-70725, CVE-2026-70726, CVE-2026-70729, CVE-2026-70732, CVE-2026-70747, CVE-2026-70760, CVE-2026-70761, CVE-2026-70762, CVE-2026-70763, CVE-2026-70764, CVE-2026-70770, CVE-2026-70771, CVE-2026-70772, CVE-2026-70773, CVE-2026-70774, CVE-2026-70775, CVE-2026-70777, CVE-2026-70778, CVE-2026-70779, CVE-2026-70781, CVE-2026-70782, CVE-2026-70783, CVE-2026-70786, CVE-2026-70790, CVE-2026-70791, CVE-2026-70792, CVE-2026-70795, CVE-2026-70796, CVE-2026-70797, CVE-2026-70798, CVE-2026-70799, CVE-2026-70800, CVE-2026-70801, CVE-2026-70802, CVE-2026-70803, CVE-2026-70804, CVE-2026-70805, CVE-2026-70806, CVE-2026-70807, CVE-2026-70808, CVE-2026-70809, CVE-2026-70810, CVE-2026-70811, CVE-2026-70812, CVE-2026-70813, CVE-2026-70814, CVE-2026-70815, CVE-2026-70816, CVE-2026-70820, CVE-2026-70827, CVE-2026-70829, CVE-2026-70830, CVE-2026-70833, CVE-2026-70835, CVE-2026-70837, CVE-2026-70839, CVE-2026-70844, CVE-2026-70845, CVE-2026-70918, CVE-2026-70926, CVE-2026-70927, CVE-2026-70930, CVE-2026-70931, CVE-2026-70932, CVE-2026-70941, CVE-2026-70945, CVE-2026-70947, CVE-2026-70948, CVE-2026-71101, CVE-2026-71104