Oracle E-Business Suite (August 2026 CSPU)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(338747);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/08/21");

  script_cve_id(
    "CVE-2026-60693",
    "CVE-2026-60748",
    "CVE-2026-60759",
    "CVE-2026-60769",
    "CVE-2026-60781",
    "CVE-2026-60782",
    "CVE-2026-60830",
    "CVE-2026-60976",
    "CVE-2026-61139",
    "CVE-2026-61198",
    "CVE-2026-61296",
    "CVE-2026-61306",
    "CVE-2026-61319",
    "CVE-2026-61331",
    "CVE-2026-61340",
    "CVE-2026-62448",
    "CVE-2026-62449",
    "CVE-2026-62450",
    "CVE-2026-62458",
    "CVE-2026-62462",
    "CVE-2026-62475",
    "CVE-2026-62491",
    "CVE-2026-62540",
    "CVE-2026-62599",
    "CVE-2026-62600",
    "CVE-2026-62601",
    "CVE-2026-62605",
    "CVE-2026-62607",
    "CVE-2026-70680",
    "CVE-2026-70681",
    "CVE-2026-70686",
    "CVE-2026-70687",
    "CVE-2026-70690",
    "CVE-2026-70692",
    "CVE-2026-70694",
    "CVE-2026-70695",
    "CVE-2026-70696",
    "CVE-2026-70699",
    "CVE-2026-70700",
    "CVE-2026-70701",
    "CVE-2026-70702",
    "CVE-2026-70704",
    "CVE-2026-70706",
    "CVE-2026-70707",
    "CVE-2026-70708",
    "CVE-2026-70710",
    "CVE-2026-70713",
    "CVE-2026-70718",
    "CVE-2026-70720",
    "CVE-2026-70722",
    "CVE-2026-70725",
    "CVE-2026-70726",
    "CVE-2026-70729",
    "CVE-2026-70732",
    "CVE-2026-70747",
    "CVE-2026-70760",
    "CVE-2026-70761",
    "CVE-2026-70762",
    "CVE-2026-70763",
    "CVE-2026-70764",
    "CVE-2026-70770",
    "CVE-2026-70771",
    "CVE-2026-70772",
    "CVE-2026-70773",
    "CVE-2026-70774",
    "CVE-2026-70775",
    "CVE-2026-70777",
    "CVE-2026-70778",
    "CVE-2026-70779",
    "CVE-2026-70781",
    "CVE-2026-70782",
    "CVE-2026-70783",
    "CVE-2026-70786",
    "CVE-2026-70790",
    "CVE-2026-70791",
    "CVE-2026-70792",
    "CVE-2026-70795",
    "CVE-2026-70796",
    "CVE-2026-70797",
    "CVE-2026-70798",
    "CVE-2026-70799",
    "CVE-2026-70800",
    "CVE-2026-70801",
    "CVE-2026-70802",
    "CVE-2026-70803",
    "CVE-2026-70804",
    "CVE-2026-70805",
    "CVE-2026-70806",
    "CVE-2026-70807",
    "CVE-2026-70808",
    "CVE-2026-70809",
    "CVE-2026-70810",
    "CVE-2026-70811",
    "CVE-2026-70812",
    "CVE-2026-70813",
    "CVE-2026-70814",
    "CVE-2026-70815",
    "CVE-2026-70816",
    "CVE-2026-70820",
    "CVE-2026-70827",
    "CVE-2026-70829",
    "CVE-2026-70830",
    "CVE-2026-70833",
    "CVE-2026-70835",
    "CVE-2026-70837",
    "CVE-2026-70839",
    "CVE-2026-70844",
    "CVE-2026-70845",
    "CVE-2026-70918",
    "CVE-2026-70926",
    "CVE-2026-70927",
    "CVE-2026-70930",
    "CVE-2026-70931",
    "CVE-2026-70932",
    "CVE-2026-70941",
    "CVE-2026-70945",
    "CVE-2026-70947",
    "CVE-2026-70948",
    "CVE-2026-71101",
    "CVE-2026-71104"
  );

  script_name(english:"Oracle E-Business Suite (August 2026 CSPU)");

  script_set_attribute(attribute:"synopsis", value:
"The remote host is affected by multiple vulnerabilities");
  script_set_attribute(attribute:"description", value:
"The versions of Oracle E-Business Suite installed on the remote host are affected by multiple vulnerabilities as
referenced in the August 2026 CSPU advisory.

  - Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission).
    Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows
    unauthenticated attacker with network access via HTTP to compromise Oracle Payments. Successful attacks
    of this vulnerability can result in takeover of Oracle Payments. (CVE-2026-60782)

  - Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow
    Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable
    vulnerability allows unauthenticated attacker with network access via SMTP to compromise Oracle
    Workflow. Successful attacks of this vulnerability can result in takeover of Oracle Workflow.
    (CVE-2026-70926)

  - Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Internal
    Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability
    allows low privileged attacker with network access via HTTP to compromise Oracle Scripting. Successful
    attacks of this vulnerability can result in takeover of Oracle Scripting. (CVE-2026-60976)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://www.oracle.com/docs/tech/security-alerts/cspuaug2026csaf.json");
  script_set_attribute(attribute:"see_also", value:"https://www.oracle.com/security-alerts/cspuaug2026.html");
  script_set_attribute(attribute:"solution", value:
"Apply the appropriate patch according to the August 2026 Oracle Critical Security Patch Update advisory.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-60782");
  script_set_attribute(attribute:"cvss3_score_source", value:"CVE-2026-60782");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/08/18");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/08/18");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/08/21");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:oracle:e-business_suite");
  script_set_attribute(attribute:"stig_severity", value:"I");
  script_set_attribute(attribute:"thorough_tests", value:"true");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Misc.");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("oracle_e-business_query_patch_info.nbin");
  script_require_keys("Oracle/E-Business/Version", "Oracle/E-Business/patches/installed");

  exit(0);
}

include('vcf_extras_oracle.inc');

var app_info = vcf::oracle_ebusiness::get_app_info();

# Patches sourced from MOS note KA1783 (August 2026 EBS CSPU Availability Doc):
var constraints = [
  { 'min_version' : '12.2.3',  'max_version' : '12.2.3.999999',  'fix_patches' : '39700255, 31518059, 32750949, 34979060, 38510732, 39545757, 39688050' },
  { 'min_version' : '12.2.4',  'max_version' : '12.2.4.999999',  'fix_patches' : '39700255, 31518059, 32636352, 32750949, 34979060, 36453170, 39355572, 39545757, 39664473, 39676394, 39688050, 39706752, 39722060, 39836709, 39854827' },
  { 'min_version' : '12.2.5',  'max_version' : '12.2.5.999999',  'fix_patches' : '39700255, 32750949, 34979060, 36453170, 39392039, 39393465, 39545757, 39788545, 39836142, 39836562, 39836604, 39836629' },
  { 'min_version' : '12.2.6',  'max_version' : '12.2.6.999999',  'fix_patches' : '39700255, 34870379, 34979060, 36560216, 37033978, 39392039, 39393465, 39545757, 39788588, 39788595, 39836564, 39836605, 39836639' },
  { 'min_version' : '12.2.7',  'max_version' : '12.2.7.999999',  'fix_patches' : '39700255, 27429118, 30058115, 34870379, 34979060, 36560216, 39392039, 39393465, 39545757, 39788590, 39836143, 39836566, 39836606, 39836640' },
  { 'min_version' : '12.2.8',  'max_version' : '12.2.8.999999',  'fix_patches' : '39700255, 33623398, 34870379, 34979060, 36560216, 39392039, 39393465, 39545757, 39788610, 39788781, 39836567, 39836607, 39836642' },
  { 'min_version' : '12.2.9',  'max_version' : '12.2.9.999999',  'fix_patches' : '39700255, 34979060, 36560216, 39392039, 39393465, 39545757, 39788593, 39788618, 39836568, 39836608, 39836999' },
  { 'min_version' : '12.2.10', 'max_version' : '12.2.10.999999', 'fix_patches' : '39700255, 34979060, 36560216, 39392039, 39393465, 39545757, 39788602, 39788671, 39836570, 39836610, 39836647' },
  { 'min_version' : '12.2.11', 'max_version' : '12.2.11.999999', 'fix_patches' : '39700255, 34979060, 36560216, 39392039, 39393465, 39545757, 39788605, 39836105, 39836572, 39836611, 39836664' },
  { 'min_version' : '12.2.12', 'max_version' : '12.2.12.999999', 'fix_patches' : '39700255, 34979060, 36560216, 37288039, 39392039, 39393465, 39545757, 39788607, 39836107, 39836573, 39836613, 39854828' },
  { 'min_version' : '12.2.13', 'max_version' : '12.2.13.999999', 'fix_patches' : '39700255, 34979060, 36560216, 37287000, 39392039, 39393465, 39545757, 39788560, 39788613, 39836110, 39836615, 39836659' },
  { 'min_version' : '12.2.14', 'max_version' : '12.2.14.999999', 'fix_patches' : '39700255, 34979060, 39392039, 39393465, 39545757, 39788573, 39788614, 39836111, 39836615, 39836658' },
  { 'min_version' : '12.2.15', 'max_version' : '12.2.15.999999', 'fix_patches' : '39700255, 39392039, 39393465, 39496769, 39545757, 39788584, 39788614, 39836120, 39836615, 39836658' }
];

vcf::oracle_ebusiness::check_version_and_report(app_info:app_info, constraints:constraints, severity:SECURITY_HOLE, fix_date:'202608');