CVE-2026-87404

HighCVSS 7.5

Published: 20/10/2026(UTC)Translated: 21/10/2026(UTC)NVD NIST

Summary

Vulnerability in Pasta (Printing Engine component) within Oracle E-Business Suite affecting versions 12.2.3-12.2.15. A difficult-to-exploit flaw allows a low-privileged attacker with HTTP network access to take over Pasta.

Risk Assessment

An attacker could take over Pasta, compromising confidentiality, integrity, and availability of data. The CVSS score of 7.5 indicates high risk, even though exploitation is difficult.

Recommendation

Apply Oracle security updates for versions 12.2.3-12.2.15. Restrict network access to the Printing Engine component and monitor for unusual activity.

Other vulnerabilities in Pasta

CVE-2026-101703High
Vulnerability in the Pasta product of Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3-12.2.15. A difficult to exploit flaw allows a low privileged attacker with network access via HTTP to take over Pasta.

Original NVD description (English source)

Vulnerability in the Pasta product of Oracle E-Business Suite (component: Printing Engine). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Pasta. Successful attacks of this vulnerability can result in takeover of Pasta. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS