The versions of Oracle E-Business Suite installed on the remote host are affected by multiple vulnerabilities as referenced in the August 2026 CSPU advisory.

  - Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission).
    Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows     unauthenticated attacker with network access via HTTP to compromise Oracle Payments. Successful attacks     of this vulnerability can result in takeover of Oracle Payments. (CVE-2026-60782)

  - Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow     Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable     vulnerability allows unauthenticated attacker with network access via SMTP to compromise Oracle     Workflow. Successful attacks of this vulnerability can result in takeover of Oracle Workflow.
    (CVE-2026-70926)

  - Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Internal     Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability     allows low privileged attacker with network access via HTTP to compromise Oracle Scripting. Successful     attacks of this vulnerability can result in takeover of Oracle Scripting. (CVE-2026-60976)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Plugins Search

critical