CVE-2026-87357

Awaiting Analysis Awaiting Analysis - Queue

Order Capture Component Takeover in Oracle E-Business Suite

Publication date: 2026-10-20

Last updated on: 2026-10-28

Assigner: Oracle

Description

Vulnerability in the Order Capture product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Order Capture. Successful attacks of this vulnerability can result in takeover of Order Capture. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-20

Last Modified

2026-10-28

Generated

2026-11-10

AI Q&A

2026-10-21

EPSS Evaluated

2026-11-08

NVD

CVE-2026-87357

EUVD

EUVD-2026-106398

Affected Vendors & Products

Vendor	Product	Version / Range
Oracle Corporation	Order Capture	12.2.3

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle E-Business Suite's Order Capture product. It allows a highly privileged attacker with network access to take over the Order Capture component. The vulnerability has a CVSS base score of 7.2, indicating significant impact on confidentiality, integrity, and availability.

Detection Guidance

Detection involves checking for unauthorized access or modifications to the Order Capture component in Oracle E-Business Suite. Review HTTP logs for unusual activity targeting the Order Capture interface. Verify user privileges and ensure no high-privileged accounts are compromised. Check for unexpected changes in system files or configurations related to Order Capture.

Impact Analysis

If exploited, this vulnerability could allow an attacker to take full control of the Order Capture system. This could lead to unauthorized access to sensitive data, modification of orders, or disruption of services.

Compliance Impact

This vulnerability could lead to breaches of data confidentiality and integrity, which may violate GDPR and HIPAA requirements. Organizations using affected versions must address this to maintain compliance.

Mitigation Strategies

Apply the latest Oracle E-Business Suite patches for Order Capture component versions 12.2.3-12.2.15. Restrict network access to HTTP interfaces and enforce least privilege for users with high privileges.

Hi! I’m here to help you understand CVE-2026-87357. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...