Vulnerability in the Oracle iReceivables product of Oracle E-Business Suite (component: AR Web Utilities). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iReceivables. Successful attacks of this vulnerability can result in takeover of Oracle iReceivables. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Oracle |
|
No data.
No data.
References
| Link | Providers |
|---|---|
| https://www.oracle.com/security-alerts/cpujul2026.html |
|
History
Wed, 05 Aug 2026 02:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Low-Privilege HTTP Takeover in Oracle iReceivables AR Web Utilities | |
| Weaknesses | CWE-285 |
Tue, 04 Aug 2026 17:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Remote Takeover via AR Web Utilities in Oracle iReceivables | |
| Weaknesses | CWE-20 CWE-284 |
Thu, 30 Jul 2026 13:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Remote Takeover via AR Web Utilities in Oracle iReceivables | |
| Weaknesses | CWE-20 CWE-284 |
Tue, 28 Jul 2026 21:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Oracle iReceivables AR Web Utilities Remote Code Execution Vulnerability | |
| Weaknesses | CWE-284 |
Thu, 23 Jul 2026 22:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Oracle iReceivables AR Web Utilities Remote Code Execution Vulnerability | |
| Weaknesses | CWE-284 |
Tue, 21 Jul 2026 22:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Vulnerability in the Oracle iReceivables product of Oracle E-Business Suite (component: AR Web Utilities). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iReceivables. Successful attacks of this vulnerability can result in takeover of Oracle iReceivables. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). | |
| First Time appeared |
Oracle
Oracle ireceivables |
|
| CPEs | cpe:2.3:a:oracle:ireceivables:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Oracle
Oracle ireceivables |
|
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: oracle
Published: 2026-07-21T21:36:55.137Z
Updated: 2026-07-24T15:21:08.595Z
Reserved: 2026-07-08T15:51:55.590Z
Link: CVE-2026-60783
Vulnrichment
No data.
NVD
No data.
Redhat
No data.