Payments vulnerabilities

9 known vulnerabilities in Payments from Oracle. 9 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  Oracle Payments: Improper Access Control

  CVE-2026-70702Aug 18, 2026Oracle

  Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to co

• 7.4 High severity

  Oracle Payments: Improper Access Control

  CVE-2026-70699Aug 18, 2026Oracle

  Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to

• 7.5 High severity

  Oracle Payments: Improper Access Control

  CVE-2026-70696Aug 18, 2026Oracle

  Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to com

• 7.7 High severity

  Oracle Payments: Improper Access Control

  CVE-2026-70695Aug 18, 2026Oracle

  Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to

• 7.7 High severity

  Oracle Payments: Improper Access Control

  CVE-2026-70694Aug 18, 2026Oracle

  Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to

• 9.8 Critical severity

  Oracle Payments: Missing Authentication for Critical Functionality

  CVE-2026-60782Aug 18, 2026Oracle

  Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to co

• 7.1 High severity

  Oracle Payments: Missing Authentication for Critical Functionality

  CVE-2026-60781Aug 18, 2026Oracle

  Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to com

• 8.1 High severity

  Oracle Payments: Improper Access Control

  CVE-2026-60778Jul 21, 2026Oracle

  Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to com

• 7.1 High severity

  Oracle Payments: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-60176Jul 21, 2026Oracle

  Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to com