CVE-2026-46927(oracle / receivables)

LOWCVSS 8.1 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Vulnerability in the Oracle Receivables product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SOAP to compromise Oracle Receivables. Successful attacks of this vulnerability can result in takeover of Oracle Receivables. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-284CWE-306

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • receivables

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Affected systems

Vendors
Products
receivables

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-11-04: 111-04
Full discourse1 post
  • DFIR Lab@DFIR_Lab

    🚨 HIGH: CVE-2026-46927 - Oracle E-Business Suite Receivables CVSS 8.1 Unauthenticated SOAP exploit → full system takeover Affects: v12.2.3-12.2.15 Patch immediately #CVE #Vulnerability #PatchNow #ThreatIntel #DFIR https://t.co/9hrysg78Dy

    0000042
    160 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Apporaclereceivables---

Explore more