Threats affecting pkg:maven/com.oracle/OraclePayments

CVE-2026-70694 is a high-severity vulnerability in Oracle Payments component of Oracle E-Business Suite versions 12.2.3 through 12.2.15. It allows a high privileged attacker with network access via HTTP to compromise Oracle Payments, potentially impacting additional Oracle products. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data within Oracle Payments. The vulnerability has a CVSS 3.1 base score of 7.7, indicating significant confidentiality and integrity impacts but no availability impact. Oracle has published a Critical Security Patch Update advisory addressing this and many other vulnerabilities, recommending timely patch application.

CVE-2026-60781 is a vulnerability in Oracle Payments component of Oracle E-Business Suite versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data and perform unauthorized update, insert, or delete operations on some accessible data. The vulnerability has a CVSS 3.1 base score of 7.1, indicating high severity with significant confidentiality and integrity impacts but no availability impact.

CVE-2026-60176 is a vulnerability in Oracle Payments (component: File Transmission) versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical or all accessible Oracle Payments data and cause a partial denial of service. The vulnerability has a CVSS 3.1 base score of 7.1, indicating high severity with significant confidentiality and availability impacts.

Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Payments. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Payments accessible data as well as unauthorized access to critical data or complete access to all Oracle Payments accessible data. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).