[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-46817":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-22T20:44:10.849Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":853,"aliases":854,"duplicate_of":9,"upstream":855,"downstream":856,"duplicates":857,"related":858,"reserved_at":9,"published_at":859,"modified_at":860,"state":861,"summary":862,"references_raw":873,"kevs":886,"epss":897,"epss_history":900,"metrics":1152,"affected":1159},"CVE-2026-46817","Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Payments.  Successful attacks of this vulnerability can result in takeover of Oracle Payments. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).",null,[11,264,827],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-269","Improper Privilege Management","The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.","weakness","Draft","Class","Medium",[20,182,260],{"id":21,"name":22,"techniques":23},"CAPEC-122","Privilege Abuse",[24],{"id":25,"name":26,"tactics":27,"countermeasures":34},"T1548","Abuse Elevation Control Mechanism",[28,31],{"id":29,"name":30},"TA0030","Defense Evasion",{"id":32,"name":33},"TA0111","Privilege Escalation",[35,40,45,50,55,59,63,67,72,76,80,84,88,92,96,100,104,109,113,117,121,126,130,134,138,142,146,150,154,158,162,166,170,174,178],{"id":36,"name":37,"tactic":38},"D3-CM","Content Modification",{"name":39},"Isolate",{"id":41,"name":42,"tactic":43},"D3-AEM","Application Exception Monitoring",{"name":44},"Detect",{"id":46,"name":47,"tactic":48},"D3-DF","Decoy File",{"name":49},"Deceive",{"id":51,"name":52,"tactic":53},"D3-CI","Configuration Inventory",{"name":54},"Model",{"id":56,"name":57,"tactic":58},"D3-SCA","System Call Analysis",{"name":44},{"id":60,"name":61,"tactic":62},"D3-SFA","System File Analysis",{"name":44},{"id":64,"name":65,"tactic":66},"D3-FA","File Analysis",{"name":44},{"id":68,"name":69,"tactic":70},"D3-FE","File Encryption",{"name":71},"Harden",{"id":73,"name":74,"tactic":75},"D3-AA","Agent Authentication",{"name":71},{"id":77,"name":78,"tactic":79},"D3-CDP","Change Default Password",{"name":71},{"id":81,"name":82,"tactic":83},"D3-AM","Access Modeling",{"name":54},{"id":85,"name":86,"tactic":87},"D3-DI","Data Inventory",{"name":54},{"id":89,"name":90,"tactic":91},"D3-NTPM","Network Traffic Policy Mapping",{"name":54},{"id":93,"name":94,"tactic":95},"D3-PSA","Process Spawn Analysis",{"name":44},{"id":97,"name":98,"tactic":99},"D3-SCP","System Configuration Permissions",{"name":71},{"id":101,"name":102,"tactic":103},"D3-FIM","File Integrity Monitoring",{"name":44},{"id":105,"name":106,"tactic":107},"D3-RC","Restore Configuration",{"name":108},"Restore",{"id":110,"name":111,"tactic":112},"D3-RF","Restore File",{"name":108},{"id":114,"name":115,"tactic":116},"D3-ULA","Unlock Account",{"name":108},{"id":118,"name":119,"tactic":120},"D3-RUAA","Restore User Account Access",{"name":108},{"id":122,"name":123,"tactic":124},"D3-FEV","File Eviction",{"name":125},"Evict",{"id":127,"name":128,"tactic":129},"D3-RD","Restore Database",{"name":108},{"id":131,"name":132,"tactic":133},"D3-AL","Account Locking",{"name":125},{"id":135,"name":136,"tactic":137},"D3-OPM","Operational Process Monitoring",{"name":44},{"id":139,"name":140,"tactic":141},"D3-DA","Dynamic Analysis",{"name":44},{"id":143,"name":144,"tactic":145},"D3-EFA","Emulated File Analysis",{"name":44},{"id":147,"name":148,"tactic":149},"D3-SCF","System Call Filtering",{"name":39},{"id":151,"name":152,"tactic":153},"D3-CF","Content Filtering",{"name":39},{"id":155,"name":156,"tactic":157},"D3-LFP","Local File Permissions",{"name":39},{"id":159,"name":160,"tactic":161},"D3-RFAM","Remote File Access Mediation",{"name":39},{"id":163,"name":164,"tactic":165},"D3-CQ","Content Quarantine",{"name":39},{"id":167,"name":168,"tactic":169},"D3-UAP","User Account Permissions",{"name":39},{"id":171,"name":172,"tactic":173},"D3-HBPI","Hardware-based Process Isolation",{"name":39},{"id":175,"name":176,"tactic":177},"D3-EAL","Executable Allowlisting",{"name":39},{"id":179,"name":180,"tactic":181},"D3-EDL","Executable Denylisting",{"name":39},{"id":183,"name":33,"techniques":184},"CAPEC-233",[185],{"id":25,"name":26,"tactics":186,"countermeasures":189},[187,188],{"id":29,"name":30},{"id":32,"name":33},[190,192,194,196,198,200,202,204,206,208,210,212,214,216,218,220,222,224,226,228,230,232,234,236,238,240,242,244,246,248,250,252,254,256,258],{"id":36,"name":37,"tactic":191},{"name":39},{"id":41,"name":42,"tactic":193},{"name":44},{"id":46,"name":47,"tactic":195},{"name":49},{"id":51,"name":52,"tactic":197},{"name":54},{"id":56,"name":57,"tactic":199},{"name":44},{"id":60,"name":61,"tactic":201},{"name":44},{"id":64,"name":65,"tactic":203},{"name":44},{"id":68,"name":69,"tactic":205},{"name":71},{"id":73,"name":74,"tactic":207},{"name":71},{"id":77,"name":78,"tactic":209},{"name":71},{"id":81,"name":82,"tactic":211},{"name":54},{"id":85,"name":86,"tactic":213},{"name":54},{"id":89,"name":90,"tactic":215},{"name":54},{"id":93,"name":94,"tactic":217},{"name":44},{"id":97,"name":98,"tactic":219},{"name":71},{"id":101,"name":102,"tactic":221},{"name":44},{"id":105,"name":106,"tactic":223},{"name":108},{"id":110,"name":111,"tactic":225},{"name":108},{"id":114,"name":115,"tactic":227},{"name":108},{"id":118,"name":119,"tactic":229},{"name":108},{"id":122,"name":123,"tactic":231},{"name":125},{"id":127,"name":128,"tactic":233},{"name":108},{"id":131,"name":132,"tactic":235},{"name":125},{"id":135,"name":136,"tactic":237},{"name":44},{"id":139,"name":140,"tactic":239},{"name":44},{"id":143,"name":144,"tactic":241},{"name":44},{"id":147,"name":148,"tactic":243},{"name":39},{"id":151,"name":152,"tactic":245},{"name":39},{"id":155,"name":156,"tactic":247},{"name":39},{"id":159,"name":160,"tactic":249},{"name":39},{"id":163,"name":164,"tactic":251},{"name":39},{"id":167,"name":168,"tactic":253},{"name":39},{"id":171,"name":172,"tactic":255},{"name":39},{"id":175,"name":176,"tactic":257},{"name":39},{"id":179,"name":180,"tactic":259},{"name":39},{"id":261,"name":262,"techniques":263},"CAPEC-58","Restful Privilege Elevation",[],{"_key":265,"id":265,"name":266,"description":267,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":268,"capec":269},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","High",[270,349,428,432,436,440,459,648,710,794],{"id":271,"name":272,"techniques":273},"CAPEC-114","Authentication Abuse",[274],{"id":25,"name":26,"tactics":275,"countermeasures":278},[276,277],{"id":29,"name":30},{"id":32,"name":33},[279,281,283,285,287,289,291,293,295,297,299,301,303,305,307,309,311,313,315,317,319,321,323,325,327,329,331,333,335,337,339,341,343,345,347],{"id":36,"name":37,"tactic":280},{"name":39},{"id":41,"name":42,"tactic":282},{"name":44},{"id":46,"name":47,"tactic":284},{"name":49},{"id":51,"name":52,"tactic":286},{"name":54},{"id":56,"name":57,"tactic":288},{"name":44},{"id":60,"name":61,"tactic":290},{"name":44},{"id":64,"name":65,"tactic":292},{"name":44},{"id":68,"name":69,"tactic":294},{"name":71},{"id":73,"name":74,"tactic":296},{"name":71},{"id":77,"name":78,"tactic":298},{"name":71},{"id":81,"name":82,"tactic":300},{"name":54},{"id":85,"name":86,"tactic":302},{"name":54},{"id":89,"name":90,"tactic":304},{"name":54},{"id":93,"name":94,"tactic":306},{"name":44},{"id":97,"name":98,"tactic":308},{"name":71},{"id":101,"name":102,"tactic":310},{"name":44},{"id":105,"name":106,"tactic":312},{"name":108},{"id":110,"name":111,"tactic":314},{"name":108},{"id":114,"name":115,"tactic":316},{"name":108},{"id":118,"name":119,"tactic":318},{"name":108},{"id":122,"name":123,"tactic":320},{"name":125},{"id":127,"name":128,"tactic":322},{"name":108},{"id":131,"name":132,"tactic":324},{"name":125},{"id":135,"name":136,"tactic":326},{"name":44},{"id":139,"name":140,"tactic":328},{"name":44},{"id":143,"name":144,"tactic":330},{"name":44},{"id":147,"name":148,"tactic":332},{"name":39},{"id":151,"name":152,"tactic":334},{"name":39},{"id":155,"name":156,"tactic":336},{"name":39},{"id":159,"name":160,"tactic":338},{"name":39},{"id":163,"name":164,"tactic":340},{"name":39},{"id":167,"name":168,"tactic":342},{"name":39},{"id":171,"name":172,"tactic":344},{"name":39},{"id":175,"name":176,"tactic":346},{"name":39},{"id":179,"name":180,"tactic":348},{"name":39},{"id":350,"name":351,"techniques":352},"CAPEC-115","Authentication Bypass",[353],{"id":25,"name":26,"tactics":354,"countermeasures":357},[355,356],{"id":29,"name":30},{"id":32,"name":33},[358,360,362,364,366,368,370,372,374,376,378,380,382,384,386,388,390,392,394,396,398,400,402,404,406,408,410,412,414,416,418,420,422,424,426],{"id":36,"name":37,"tactic":359},{"name":39},{"id":41,"name":42,"tactic":361},{"name":44},{"id":46,"name":47,"tactic":363},{"name":49},{"id":51,"name":52,"tactic":365},{"name":54},{"id":56,"name":57,"tactic":367},{"name":44},{"id":60,"name":61,"tactic":369},{"name":44},{"id":64,"name":65,"tactic":371},{"name":44},{"id":68,"name":69,"tactic":373},{"name":71},{"id":73,"name":74,"tactic":375},{"name":71},{"id":77,"name":78,"tactic":377},{"name":71},{"id":81,"name":82,"tactic":379},{"name":54},{"id":85,"name":86,"tactic":381},{"name":54},{"id":89,"name":90,"tactic":383},{"name":54},{"id":93,"name":94,"tactic":385},{"name":44},{"id":97,"name":98,"tactic":387},{"name":71},{"id":101,"name":102,"tactic":389},{"name":44},{"id":105,"name":106,"tactic":391},{"name":108},{"id":110,"name":111,"tactic":393},{"name":108},{"id":114,"name":115,"tactic":395},{"name":108},{"id":118,"name":119,"tactic":397},{"name":108},{"id":122,"name":123,"tactic":399},{"name":125},{"id":127,"name":128,"tactic":401},{"name":108},{"id":131,"name":132,"tactic":403},{"name":125},{"id":135,"name":136,"tactic":405},{"name":44},{"id":139,"name":140,"tactic":407},{"name":44},{"id":143,"name":144,"tactic":409},{"name":44},{"id":147,"name":148,"tactic":411},{"name":39},{"id":151,"name":152,"tactic":413},{"name":39},{"id":155,"name":156,"tactic":415},{"name":39},{"id":159,"name":160,"tactic":417},{"name":39},{"id":163,"name":164,"tactic":419},{"name":39},{"id":167,"name":168,"tactic":421},{"name":39},{"id":171,"name":172,"tactic":423},{"name":39},{"id":175,"name":176,"tactic":425},{"name":39},{"id":179,"name":180,"tactic":427},{"name":39},{"id":429,"name":430,"techniques":431},"CAPEC-151","Identity Spoofing",[],{"id":433,"name":434,"techniques":435},"CAPEC-194","Fake the Source of Data",[],{"id":437,"name":438,"techniques":439},"CAPEC-22","Exploiting Trust in Client",[],{"id":441,"name":442,"techniques":443},"CAPEC-57","Utilizing REST's Trust in the System Resource to Obtain Sensitive Data",[444],{"id":445,"name":446,"tactics":447,"countermeasures":454},"T1040","Network Sniffing",[448,451],{"id":449,"name":450},"TA0031","Credential Access",{"id":452,"name":453},"TA0102","Discovery",[455],{"id":456,"name":457,"tactic":458},"D3-DNSTA","DNS Traffic Analysis",{"name":44},{"id":460,"name":461,"techniques":462},"CAPEC-593","Session Hijacking",[463,507,620],{"id":464,"name":465,"tactics":466,"countermeasures":470},"T1185","Browser Session Hijacking",[467],{"id":468,"name":469},"TA0100","Collection",[471,475,479,483,487,491,495,499,503],{"id":472,"name":473,"tactic":474},"D3-NTF","Network Traffic Filtering",{"name":39},{"id":476,"name":477,"tactic":478},"D3-NTSA","Network Traffic Signature Analysis",{"name":44},{"id":480,"name":481,"tactic":482},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":44},{"id":484,"name":485,"tactic":486},"D3-APCA","Application Protocol Command Analysis",{"name":44},{"id":488,"name":489,"tactic":490},"D3-NTCD","Network Traffic Community Deviation",{"name":44},{"id":492,"name":493,"tactic":494},"D3-RTSD","Remote Terminal Session Detection",{"name":44},{"id":496,"name":497,"tactic":498},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":44},{"id":500,"name":501,"tactic":502},"D3-CSPP","Client-server Payload Profiling",{"name":44},{"id":504,"name":505,"tactic":506},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":44},{"id":508,"name":509,"tactics":510,"countermeasures":515},"T1550.001","Application Access Token",[511,512],{"id":29,"name":30},{"id":513,"name":514},"TA0109","Lateral Movement",[516,520,522,526,528,532,534,538,542,546,550,554,558,560,562,566,570,572,576,580,582,586,588,592,596,598,602,606,610,612,616,618],{"id":517,"name":518,"tactic":519},"D3-PS","Process Suspension",{"name":125},{"id":484,"name":485,"tactic":521},{"name":44},{"id":523,"name":524,"tactic":525},"D3-MFA","Multi-factor Authentication",{"name":71},{"id":496,"name":497,"tactic":527},{"name":44},{"id":529,"name":530,"tactic":531},"D3-PT","Process Termination",{"name":125},{"id":93,"name":94,"tactic":533},{"name":44},{"id":535,"name":536,"tactic":537},"D3-CH","Credential Hardening",{"name":71},{"id":539,"name":540,"tactic":541},"D3-PLA","Process Lineage Analysis",{"name":44},{"id":543,"name":544,"tactic":545},"D3-CR","Credential Revocation",{"name":125},{"id":547,"name":548,"tactic":549},"D3-ANCI","Authentication Cache Invalidation",{"name":125},{"id":551,"name":552,"tactic":553},"D3-PSMD","Process Self-Modification Detection",{"name":44},{"id":555,"name":556,"tactic":557},"D3-KBPI","Kernel-based Process Isolation",{"name":39},{"id":147,"name":148,"tactic":559},{"name":39},{"id":171,"name":172,"tactic":561},{"name":39},{"id":563,"name":564,"tactic":565},"D3-ABPI","Application-based Process Isolation",{"name":39},{"id":567,"name":568,"tactic":569},"D3-CTS","Credential Transmission Scoping",{"name":39},{"id":504,"name":505,"tactic":571},{"name":44},{"id":573,"name":574,"tactic":575},"D3-DUC","Decoy User Credential",{"name":49},{"id":577,"name":578,"tactic":579},"D3-WSAM","Web Session Access Mediation",{"name":39},{"id":492,"name":493,"tactic":581},{"name":44},{"id":583,"name":584,"tactic":585},"D3-CCSA","Credential Compromise Scope Analysis",{"name":44},{"id":488,"name":489,"tactic":587},{"name":44},{"id":589,"name":590,"tactic":591},"D3-RIC","Reissue Credential",{"name":108},{"id":593,"name":594,"tactic":595},"D3-TBA","Token-based Authentication",{"name":71},{"id":480,"name":481,"tactic":597},{"name":44},{"id":599,"name":600,"tactic":601},"D3-TB","Token Binding",{"name":71},{"id":603,"name":604,"tactic":605},"D3-HR","Host Reboot",{"name":125},{"id":607,"name":608,"tactic":609},"D3-HS","Host Shutdown",{"name":125},{"id":472,"name":473,"tactic":611},{"name":39},{"id":613,"name":614,"tactic":615},"D3-CRO","Credential Rotation",{"name":71},{"id":476,"name":477,"tactic":617},{"name":44},{"id":500,"name":501,"tactic":619},{"name":44},{"id":621,"name":622,"tactics":623,"countermeasures":625},"T1563","Remote Service Session Hijacking",[624],{"id":513,"name":514},[626,628,630,632,636,638,640,642,644,646],{"id":476,"name":477,"tactic":627},{"name":44},{"id":492,"name":493,"tactic":629},{"name":44},{"id":500,"name":501,"tactic":631},{"name":44},{"id":633,"name":634,"tactic":635},"D3-ST","Session Termination",{"name":125},{"id":484,"name":485,"tactic":637},{"name":44},{"id":496,"name":497,"tactic":639},{"name":44},{"id":472,"name":473,"tactic":641},{"name":39},{"id":488,"name":489,"tactic":643},{"name":44},{"id":504,"name":505,"tactic":645},{"name":44},{"id":480,"name":481,"tactic":647},{"name":44},{"id":649,"name":650,"techniques":651},"CAPEC-633","Token Impersonation",[652],{"id":653,"name":654,"tactics":655,"countermeasures":661},"T1134","Access Token Manipulation",[656,657,660],{"id":29,"name":30},{"id":658,"name":659},"TA0005","Stealth",{"id":32,"name":33},[662,664,666,668,670,672,674,676,678,680,682,684,686,688,690,692,694,696,698,700,702,704,706,708],{"id":567,"name":568,"tactic":663},{"name":39},{"id":583,"name":584,"tactic":665},{"name":44},{"id":135,"name":136,"tactic":667},{"name":44},{"id":93,"name":94,"tactic":669},{"name":44},{"id":633,"name":634,"tactic":671},{"name":125},{"id":543,"name":544,"tactic":673},{"name":125},{"id":547,"name":548,"tactic":675},{"name":125},{"id":51,"name":52,"tactic":677},{"name":54},{"id":573,"name":574,"tactic":679},{"name":49},{"id":535,"name":536,"tactic":681},{"name":71},{"id":171,"name":172,"tactic":683},{"name":39},{"id":523,"name":524,"tactic":685},{"name":71},{"id":613,"name":614,"tactic":687},{"name":71},{"id":599,"name":600,"tactic":689},{"name":71},{"id":593,"name":594,"tactic":691},{"name":71},{"id":105,"name":106,"tactic":693},{"name":108},{"id":589,"name":590,"tactic":695},{"name":108},{"id":89,"name":90,"tactic":697},{"name":54},{"id":81,"name":82,"tactic":699},{"name":54},{"id":147,"name":148,"tactic":701},{"name":39},{"id":41,"name":42,"tactic":703},{"name":44},{"id":56,"name":57,"tactic":705},{"name":44},{"id":175,"name":176,"tactic":707},{"name":39},{"id":179,"name":180,"tactic":709},{"name":39},{"id":711,"name":712,"techniques":713},"CAPEC-650","Upload a Web Shell to a Web Server",[714],{"id":715,"name":716,"tactics":717,"countermeasures":721},"T1505.003","Web Shell",[718],{"id":719,"name":720},"TA0110","Persistence",[722,724,726,728,730,734,738,740,742,744,746,748,750,752,756,758,760,762,764,766,768,770,772,774,776,778,780,782,784,788,792],{"id":68,"name":69,"tactic":723},{"name":71},{"id":563,"name":564,"tactic":725},{"name":39},{"id":46,"name":47,"tactic":727},{"name":49},{"id":551,"name":552,"tactic":729},{"name":44},{"id":731,"name":732,"tactic":733},"D3-PLM","Physical Link Mapping",{"name":54},{"id":735,"name":736,"tactic":737},"D3-LLM","Logical Link Mapping",{"name":54},{"id":139,"name":140,"tactic":739},{"name":44},{"id":101,"name":102,"tactic":741},{"name":44},{"id":179,"name":180,"tactic":743},{"name":39},{"id":555,"name":556,"tactic":745},{"name":39},{"id":143,"name":144,"tactic":747},{"name":44},{"id":529,"name":530,"tactic":749},{"name":125},{"id":163,"name":164,"tactic":751},{"name":39},{"id":753,"name":754,"tactic":755},"D3-EHB","Endpoint Health Beacon",{"name":44},{"id":147,"name":148,"tactic":757},{"name":39},{"id":151,"name":152,"tactic":759},{"name":39},{"id":539,"name":540,"tactic":761},{"name":44},{"id":36,"name":37,"tactic":763},{"name":39},{"id":517,"name":518,"tactic":765},{"name":125},{"id":175,"name":176,"tactic":767},{"name":39},{"id":122,"name":123,"tactic":769},{"name":125},{"id":93,"name":94,"tactic":771},{"name":44},{"id":159,"name":160,"tactic":773},{"name":39},{"id":603,"name":604,"tactic":775},{"name":125},{"id":110,"name":111,"tactic":777},{"name":108},{"id":607,"name":608,"tactic":779},{"name":125},{"id":171,"name":172,"tactic":781},{"name":39},{"id":64,"name":65,"tactic":783},{"name":44},{"id":785,"name":786,"tactic":787},"D3-NNI","Network Node Inventory",{"name":54},{"id":789,"name":790,"tactic":791},"D3-RNA","Restore Network Access",{"name":108},{"id":155,"name":156,"tactic":793},{"name":39},{"id":795,"name":796,"techniques":797},"CAPEC-94","Adversary in the Middle (AiTM)",[798],{"id":799,"name":800,"tactics":801,"countermeasures":804},"T1557","Adversary-in-the-Middle",[802,803],{"id":449,"name":450},{"id":468,"name":469},[805,807,809,811,813,815,817,819,821,823],{"id":472,"name":473,"tactic":806},{"name":39},{"id":480,"name":481,"tactic":808},{"name":44},{"id":496,"name":497,"tactic":810},{"name":44},{"id":500,"name":501,"tactic":812},{"name":44},{"id":504,"name":505,"tactic":814},{"name":44},{"id":476,"name":477,"tactic":816},{"name":44},{"id":484,"name":485,"tactic":818},{"name":44},{"id":488,"name":489,"tactic":820},{"name":44},{"id":492,"name":493,"tactic":822},{"name":44},{"id":824,"name":825,"tactic":826},"D3-CAA","Connection Attempt Analysis",{"name":44},{"_key":828,"id":828,"name":829,"description":830,"type":15,"status":16,"abstraction":831,"likelihood_of_exploit":268,"capec":832},"CWE-306","Missing Authentication for Critical Function","The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.","Base",[833,837,841,845,849],{"id":834,"name":835,"techniques":836},"CAPEC-12","Choosing Message Identifier",[],{"id":838,"name":839,"techniques":840},"CAPEC-166","Force the System to Reset Values",[],{"id":842,"name":843,"techniques":844},"CAPEC-216","Communication Channel Manipulation",[],{"id":846,"name":847,"techniques":848},"CAPEC-36","Using Unpublished Interfaces or Functionality",[],{"id":850,"name":851,"techniques":852},"CAPEC-62","Cross Site Request Forgery",[],[],[],[],[],[],[],"2026-05-28T20:17:10.861Z","2026-07-16T03:55:21.823Z","Analyzed",{"cisa_kev":863,"cisa_ransomware":864,"cisa_vendor":865,"epss_severity":866,"epss_score":867,"severity":868,"severity_score":869,"severity_version":870,"severity_source":871,"severity_vector":872,"severity_status":861},true,false,"Oracle","medium",0.13309,"critical",9.8,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",[874,880],{"url":875,"sources":876,"tags":878},"https://www.oracle.com/security-alerts/cspumay2026.html",[871,877],"nvd",[879],"Vendor Advisory",{"url":881,"sources":882,"tags":883},"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-46817",[871,877],[884,885],"Government Resource","US Government Resource",[887],{"source":888,"vendor":865,"product":889,"date_added":890,"vulnerability_name":891,"short_description":892,"required_action":893,"due_date":894,"known_ransomware_campaign_use":895,"notes":896,"exploitation_type":9},"cisa","E-Business Suite","2026-07-15","Oracle E-Business Suite Improper Privilege Management Vulnerability","Oracle E-Business Suite contains an improper privilege management vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Payments. Successful attacks of this vulnerability can result in takeover of Oracle Payments.","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","2026-07-18","Unknown","https://www.oracle.com/security-alerts/cspumay2026.html ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-46817",{"date":898,"score":867,"percentile":899},"2026-08-22",0.96094,[901,905,909,912,915,917,921,924,928,931,934,937,940,943,946,949,952,954,958,961,964,967,970,973,976,979,982,985,988,991,994,997,999,1003,1006,1009,1012,1015,1018,1021,1024,1027,1030,1033,1036,1039,1042,1045,1047,1051,1054,1056,1059,1062,1065,1068,1071,1074,1077,1080,1082,1085,1087,1090,1093,1095,1097,1099,1102,1105,1108,1111,1114,1116,1119,1122,1125,1128,1131,1134,1137,1139,1142,1145,1148,1151],{"date":902,"score":903,"percentile":904},"2026-05-29",0.00043,0.13445,{"date":906,"score":907,"percentile":908},"2026-05-30",0.00041,0.1294,{"date":910,"score":907,"percentile":911},"2026-05-31",0.12922,{"date":913,"score":907,"percentile":914},"2026-06-01",0.12884,{"date":916,"score":907,"percentile":914},"2026-06-02",{"date":918,"score":919,"percentile":920},"2026-06-03",0.00054,0.17335,{"date":922,"score":919,"percentile":923},"2026-06-04",0.17351,{"date":925,"score":926,"percentile":927},"2026-06-05",0.00114,0.29725,{"date":929,"score":926,"percentile":930},"2026-06-06",0.29689,{"date":932,"score":926,"percentile":933},"2026-06-07",0.29655,{"date":935,"score":926,"percentile":936},"2026-06-08",0.29623,{"date":938,"score":926,"percentile":939},"2026-06-09",0.29636,{"date":941,"score":926,"percentile":942},"2026-06-10",0.29657,{"date":944,"score":926,"percentile":945},"2026-06-11",0.29669,{"date":947,"score":926,"percentile":948},"2026-06-12",0.29866,{"date":950,"score":926,"percentile":951},"2026-06-13",0.29882,{"date":953,"score":926,"percentile":948},"2026-06-14",{"date":955,"score":956,"percentile":957},"2026-06-15",0.00418,0.3314,{"date":959,"score":956,"percentile":960},"2026-06-16",0.33196,{"date":962,"score":956,"percentile":963},"2026-06-17",0.33226,{"date":965,"score":956,"percentile":966},"2026-06-18",0.33284,{"date":968,"score":956,"percentile":969},"2026-06-19",0.33276,{"date":971,"score":956,"percentile":972},"2026-06-20",0.33268,{"date":974,"score":956,"percentile":975},"2026-06-21",0.3325,{"date":977,"score":956,"percentile":978},"2026-06-22",0.33237,{"date":980,"score":956,"percentile":981},"2026-06-23",0.33357,{"date":983,"score":956,"percentile":984},"2026-06-24",0.33394,{"date":986,"score":956,"percentile":987},"2026-06-25",0.33469,{"date":989,"score":956,"percentile":990},"2026-06-26",0.33512,{"date":992,"score":956,"percentile":993},"2026-06-27",0.33556,{"date":995,"score":956,"percentile":996},"2026-06-28",0.3353,{"date":998,"score":956,"percentile":996},"2026-06-29",{"date":1000,"score":1001,"percentile":1002},"2026-06-30",0.00677,0.47625,{"date":1004,"score":1001,"percentile":1005},"2026-07-01",0.47712,{"date":1007,"score":1001,"percentile":1008},"2026-07-02",0.47752,{"date":1010,"score":1001,"percentile":1011},"2026-07-03",0.47769,{"date":1013,"score":1001,"percentile":1014},"2026-07-04",0.47796,{"date":1016,"score":1001,"percentile":1017},"2026-07-05",0.47805,{"date":1019,"score":1001,"percentile":1020},"2026-07-06",0.47816,{"date":1022,"score":1001,"percentile":1023},"2026-07-07",0.4782,{"date":1025,"score":1001,"percentile":1026},"2026-07-08",0.47837,{"date":1028,"score":1001,"percentile":1029},"2026-07-09",0.47901,{"date":1031,"score":1001,"percentile":1032},"2026-07-10",0.47932,{"date":1034,"score":1001,"percentile":1035},"2026-07-11",0.47967,{"date":1037,"score":1001,"percentile":1038},"2026-07-12",0.47964,{"date":1040,"score":1001,"percentile":1041},"2026-07-13",0.47995,{"date":1043,"score":1001,"percentile":1044},"2026-07-14",0.48012,{"date":890,"score":1001,"percentile":1046},0.48111,{"date":1048,"score":1049,"percentile":1050},"2026-07-16",0.01045,0.60266,{"date":1052,"score":1049,"percentile":1053},"2026-07-17",0.60283,{"date":894,"score":1049,"percentile":1055},0.60302,{"date":1057,"score":1049,"percentile":1058},"2026-07-19",0.60308,{"date":1060,"score":1049,"percentile":1061},"2026-07-20",0.60352,{"date":1063,"score":1049,"percentile":1064},"2026-07-21",0.60378,{"date":1066,"score":1049,"percentile":1067},"2026-07-22",0.6053,{"date":1069,"score":1049,"percentile":1070},"2026-07-23",0.60554,{"date":1072,"score":867,"percentile":1073},"2026-07-24",0.95986,{"date":1075,"score":867,"percentile":1076},"2026-07-25",0.9599,{"date":1078,"score":867,"percentile":1079},"2026-07-26",0.95991,{"date":1081,"score":867,"percentile":1079},"2026-07-27",{"date":1083,"score":867,"percentile":1084},"2026-07-28",0.95996,{"date":1086,"score":867,"percentile":1084},"2026-07-29",{"date":1088,"score":867,"percentile":1089},"2026-07-30",0.96003,{"date":1091,"score":867,"percentile":1092},"2026-07-31",0.96006,{"date":1094,"score":867,"percentile":1092},"2026-08-01",{"date":1096,"score":867,"percentile":1092},"2026-08-02",{"date":1098,"score":867,"percentile":1092},"2026-08-03",{"date":1100,"score":867,"percentile":1101},"2026-08-04",0.96009,{"date":1103,"score":867,"percentile":1104},"2026-08-05",0.96013,{"date":1106,"score":867,"percentile":1107},"2026-08-06",0.96017,{"date":1109,"score":867,"percentile":1110},"2026-08-07",0.96021,{"date":1112,"score":867,"percentile":1113},"2026-08-08",0.96023,{"date":1115,"score":867,"percentile":1113},"2026-08-09",{"date":1117,"score":867,"percentile":1118},"2026-08-10",0.96024,{"date":1120,"score":867,"percentile":1121},"2026-08-11",0.96032,{"date":1123,"score":867,"percentile":1124},"2026-08-12",0.96041,{"date":1126,"score":867,"percentile":1127},"2026-08-13",0.96046,{"date":1129,"score":867,"percentile":1130},"2026-08-14",0.9605,{"date":1132,"score":867,"percentile":1133},"2026-08-15",0.9606,{"date":1135,"score":867,"percentile":1136},"2026-08-16",0.96062,{"date":1138,"score":867,"percentile":1136},"2026-08-17",{"date":1140,"score":867,"percentile":1141},"2026-08-18",0.96066,{"date":1143,"score":867,"percentile":1144},"2026-08-19",0.96082,{"date":1146,"score":867,"percentile":1147},"2026-08-20",0.96089,{"date":1149,"score":867,"percentile":1150},"2026-08-21",0.96093,{"date":898,"score":867,"percentile":899},[1153,1157],{"source":871,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":1154,"cvss_v4_0":9},{"baseScore":869,"baseSeverity":1155,"vectorString":872,"impactScore":869,"exploitabilityScore":1156},"CRITICAL",10,{"source":877,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":1158,"cvss_v4_0":9},{"baseScore":869,"baseSeverity":1155,"vectorString":872,"impactScore":869,"exploitabilityScore":1156},[1160,1171],{"ecosystem":9,"name":1161,"vendor":1162,"product":1163,"cpe_part":1164,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":1165},"Oracle Payments","oracle corporation","oracle payments","a",[1166],{"version":1167,"is_range":863,"range_type":871,"version_start":1168,"version_start_type":1169,"version_end":1170,"version_end_type":1169,"fixed_in":9},">= 12.2.3, \u003C= 12.2.15","12.2.3","including","12.2.15",{"ecosystem":9,"name":889,"vendor":1172,"product":1173,"cpe_part":1164,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":1174},"oracle","e-business_suite",[1175],{"version":1176,"is_range":863,"range_type":1177,"version_start":1168,"version_start_type":1169,"version_end":1170,"version_end_type":1169,"fixed_in":9},"gte12.2.3_lte12.2.15","cpe"]