CVE-2026-60176

Name of the Vulnerable Software and Affected Versions Oracle Payments versions 12.2.3 through 12.2.15

Description A flaw exists in the File Transmission component of Oracle Payments within Oracle E-Business Suite. A low privileged attacker with network access via HTTP can exploit this issue to compromise the system. This may lead to unauthorized access to critical data or all accessible data within Oracle Payments, as well as the ability to cause a partial denial of service (partial DOS), which is a condition where the system becomes partially unavailable to users.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.