Skip to main content

E-Business Suite vulnerabilities

4 published alerts for Oracle E-Business Suite.

Actively exploited (KEV)

CVE-2026-46817

Oracle E-Business Suite Improper Privilege Management Vulnerability

Oracle E-Business Suite is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-46817). Oracle E-Business Suite contains an improper privilege management vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Payments. Successful attacks of this vulnerability can result in takeover of Oracle Payments. CISA remediation due date: 2026-07-18. PremierePC tracks KEV alerts for Upstate SC businesses — patch or open a ticket if you need help verifying exposure.

Actively exploited (KEV)Ransomware

CVE-2025-61884

Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability

Oracle E-Business Suite is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2025-61884). Oracle E-Business Suite contains a server-side request forgery (SSRF) vulnerability in the Runtime component of Oracle Configurator. This vulnerability is remotely exploitable without authentication. CISA remediation due date: 2025-11-10. If you need help checking exposure, call (864) 335-9223.

Actively exploited (KEV)Ransomware

CVE-2025-61882

Oracle E-Business Suite Unspecified Vulnerability

Oracle E-Business Suite is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2025-61882). Oracle E-Business Suite contains an unspecified vulnerability in the BI Publisher Integration component. The vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Concurrent Processing. Successful attacks can result in takeover of Oracle Concurrent Processing. CISA remediation due date: 2025-10-27. If you need help checking exposure, call (864) 335-9223.

Actively exploited (KEV)Ransomware

CVE-2022-21587

Oracle E-Business Suite Unspecified Vulnerability

Oracle E-Business Suite is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2022-21587). Oracle E-Business Suite contains an unspecified vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator. CISA remediation due date: 2023-02-23. If you need help checking exposure, call (864) 335-9223.