{"id":1771,"date":"2026-07-17T07:23:20","date_gmt":"2026-07-17T00:23:20","guid":{"rendered":"https:\/\/vncybers.vn\/cisa-yeu-cau-va-gap-lo-hong-oracle-e-business-suite-cve-2026-46817\/"},"modified":"2026-07-17T07:23:20","modified_gmt":"2026-07-17T00:23:20","slug":"cisa-yeu-cau-va-gap-lo-hong-oracle-e-business-suite-cve-2026-46817","status":"publish","type":"post","link":"https:\/\/vncybers.vn\/en\/cisa-yeu-cau-va-gap-lo-hong-oracle-e-business-suite-cve-2026-46817\/","title":{"rendered":"CISA y\u00eau c\u1ea7u v\u00e1 g\u1ea5p l\u1ed7 h\u1ed5ng Oracle E-Business Suite \u0111ang b\u1ecb khai th\u00e1c"},"content":{"rendered":"

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2026-46817<\/strong>, m\u1ed9t l\u1ed7 h\u1ed5ng nghi\u00eam tr\u1ecdng trong Oracle E-Business Suite, v\u00e0o danh m\u1ee5c Known Exploited Vulnerabilities sau khi ghi nh\u1eadn khai th\u00e1c th\u1ef1c t\u1ebf. \u0110i\u1ec3m \u0111\u00e1ng ch\u00fa \u00fd l\u00e0 h\u1ea1n x\u1eed l\u00fd d\u00e0nh cho c\u00e1c c\u01a1 quan li\u00ean bang M\u1ef9 \u0111\u01b0\u1ee3c \u0111\u1eb7t v\u00e0o ng\u00e0y 18\/07\/2026, cho th\u1ea5y m\u1ee9c \u0111\u1ed9 \u01b0u ti\u00ean r\u1ea5t cao c\u1ee7a r\u1ee7i ro n\u00e0y.<\/p>\n

\"Qu\u1ea3n<\/p>\n

L\u1ed7 h\u1ed5ng n\u1eb1m \u1edf \u0111\u00e2u<\/h2>\n

Theo CISA, CVE-2026-46817 l\u00e0 l\u1ed7 h\u1ed5ng qu\u1ea3n l\u00fd \u0111\u1eb7c quy\u1ec1n kh\u00f4ng \u0111\u00fang trong Oracle E-Business Suite<\/strong>, cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng ch\u01b0a x\u00e1c th\u1ef1c nh\u01b0ng c\u00f3 quy\u1ec1n truy c\u1eadp m\u1ea1ng qua HTTP c\u00f3 th\u1ec3 x\u00e2m ph\u1ea1m Oracle Payments. CISA c\u1ea3nh b\u00e1o vi\u1ec7c khai th\u00e1c th\u00e0nh c\u00f4ng c\u00f3 th\u1ec3 d\u1eabn t\u1edbi chi\u1ebfm quy\u1ec1n Oracle Payments.<\/p>\n

C\u1ed1 v\u1ea5n b\u1ea3o m\u1eadt c\u1ee7a Oracle cho bi\u1ebft l\u1ed7 h\u1ed5ng \u1ea3nh h\u01b0\u1edfng t\u1edbi th\u00e0nh ph\u1ea7n File Transmission<\/strong> c\u1ee7a Oracle Payments, c\u00f3 th\u1ec3 b\u1ecb khai th\u00e1c t\u1eeb xa qua HTTP m\u00e0 kh\u00f4ng c\u1ea7n x\u00e1c th\u1ef1c. L\u1ed7 h\u1ed5ng c\u00f3 \u0111i\u1ec3m CVSS 9.8, t\u00e1c \u0111\u1ed9ng cao t\u1edbi t\u00ednh b\u00ed m\u1eadt, to\u00e0n v\u1eb9n v\u00e0 s\u1eb5n s\u00e0ng c\u1ee7a h\u1ec7 th\u1ed1ng. C\u00e1c phi\u00ean b\u1ea3n \u0111\u01b0\u1ee3c Oracle li\u1ec7t k\u00ea trong d\u1ea3i b\u1ecb \u1ea3nh h\u01b0\u1edfng g\u1ed3m 12.2.3 \u0111\u1ebfn 12.2.15.<\/p>\n

Why this alert matters<\/h2>\n

Oracle E-Business Suite th\u01b0\u1eddng \u0111\u01b0\u1ee3c d\u00f9ng trong c\u00e1c m\u00f4i tr\u01b0\u1eddng t\u00e0i ch\u00ednh, mua s\u1eafm, k\u1ebf to\u00e1n, nh\u00e2n s\u1ef1 v\u00e0 v\u1eadn h\u00e0nh doanh nghi\u1ec7p. Khi m\u1ed9t th\u00e0nh ph\u1ea7n nh\u01b0 Oracle Payments b\u1ecb chi\u1ebfm quy\u1ec1n, r\u1ee7i ro kh\u00f4ng ch\u1ec9 n\u1eb1m \u1edf gi\u00e1n \u0111o\u1ea1n d\u1ecbch v\u1ee5 m\u00e0 c\u00f2n c\u00f3 th\u1ec3 m\u1edf r\u1ed9ng sang d\u1eef li\u1ec7u thanh to\u00e1n, quy tr\u00ecnh ph\u00ea duy\u1ec7t v\u00e0 c\u00e1c t\u00edch h\u1ee3p n\u1ed9i b\u1ed9.<\/p>\n

Vi\u1ec7c CISA \u0111\u01b0a l\u1ed7 h\u1ed5ng v\u00e0o KEV \u0111\u1ed3ng ngh\u0129a c\u01a1 quan n\u00e0y \u0111\u00e3 c\u00f3 b\u1eb1ng ch\u1ee9ng v\u1ec1 khai th\u00e1c th\u1ef1c t\u1ebf. V\u1edbi c\u00e1c h\u1ec7 th\u1ed1ng \u1ee9ng d\u1ee5ng doanh nghi\u1ec7p ti\u1ebfp x\u00fac m\u1ea1ng, kho\u1ea3ng th\u1eddi gian gi\u1eefa c\u00f4ng b\u1ed1, qu\u00e9t di\u1ec7n r\u1ed9ng v\u00e0 khai th\u00e1c th\u01b0\u1eddng r\u1ea5t ng\u1eafn, \u0111\u1eb7c bi\u1ec7t khi \u0111i\u1ec3m CVSS g\u1ea7n m\u1ee9c t\u1ed1i \u0111a v\u00e0 \u0111i\u1ec1u ki\u1ec7n khai th\u00e1c kh\u00f4ng y\u00eau c\u1ea7u x\u00e1c th\u1ef1c.<\/p>\n

Doanh nghi\u1ec7p n\u00ean \u01b0u ti\u00ean g\u00ec<\/h2>\n

C\u00e1c t\u1ed5 ch\u1ee9c \u0111ang v\u1eadn h\u00e0nh Oracle E-Business Suite c\u1ea7n ki\u1ec3m k\u00ea ngay phi\u00ean b\u1ea3n, x\u00e1c \u0111\u1ecbnh m\u00e1y ch\u1ee7 c\u00f3 b\u1eadt module Oracle Payments v\u00e0 r\u00e0 so\u00e1t ph\u1ea1m vi truy c\u1eadp HTTP t\u1edbi th\u00e0nh ph\u1ea7n li\u00ean quan. H\u1ec7 th\u1ed1ng Internet-facing, h\u1ec7 th\u1ed1ng t\u00edch h\u1ee3p thanh to\u00e1n ho\u1eb7c m\u00f4i tr\u01b0\u1eddng ch\u1ee9a d\u1eef li\u1ec7u t\u00e0i ch\u00ednh n\u00ean \u0111\u01b0\u1ee3c x\u1ebfp v\u00e0o nh\u00f3m \u01b0u ti\u00ean cao nh\u1ea5t.<\/p>\n

Bi\u1ec7n ph\u00e1p ch\u00ednh v\u1eabn l\u00e0 \u00e1p d\u1ee5ng h\u01b0\u1edbng d\u1eabn v\u00e0 b\u1ea3n v\u00e1 t\u1eeb Oracle. Trong tr\u01b0\u1eddng h\u1ee3p ch\u01b0a th\u1ec3 v\u00e1 ngay, \u0111\u1ed9i v\u1eadn h\u00e0nh c\u1ea7n gi\u1ea3m b\u1ec1 m\u1eb7t t\u1ea5n c\u00f4ng b\u1eb1ng c\u00e1ch h\u1ea1n ch\u1ebf truy c\u1eadp m\u1ea1ng, ki\u1ec3m so\u00e1t qua VPN ho\u1eb7c allowlist, gi\u00e1m s\u00e1t request b\u1ea5t th\u01b0\u1eddng t\u1edbi Oracle Payments v\u00e0 t\u0103ng c\u01b0\u1eddng log cho c\u00e1c ho\u1ea1t \u0111\u1ed9ng li\u00ean quan t\u1edbi File Transmission.<\/p>\n

Warning Signs to Monitor<\/h2>\n

\u0110\u1ed9i b\u1ea3o m\u1eadt n\u00ean r\u00e0 so\u00e1t log web, log \u1ee9ng d\u1ee5ng v\u00e0 log x\u00e1c th\u1ef1c quanh th\u1eddi \u0111i\u1ec3m tr\u01b0\u1edbc v\u00e0 sau khi c\u00f3 c\u1ea3nh b\u00e1o. C\u00e1c d\u1ea5u hi\u1ec7u c\u1ea7n ch\u00fa \u00fd g\u1ed3m request l\u1ea1 t\u1edbi endpoint c\u1ee7a Oracle Payments, l\u1ed7i b\u1ea5t th\u01b0\u1eddng trong lu\u1ed3ng truy\u1ec1n file, thay \u0111\u1ed5i c\u1ea5u h\u00ecnh kh\u00f4ng r\u00f5 ngu\u1ed3n, ho\u1ea1t \u0111\u1ed9ng t\u00e0i kho\u1ea3n d\u1ecbch v\u1ee5 ngo\u00e0i gi\u1edd v\u00e0 k\u1ebft n\u1ed1i t\u1eeb \u0111\u1ecba ch\u1ec9 IP ch\u01b0a t\u1eebng xu\u1ea5t hi\u1ec7n.<\/p>\n

Ngo\u00e0i vi\u1ec7c v\u00e1 l\u1ed7i, doanh nghi\u1ec7p n\u00ean ki\u1ec3m tra l\u1ea1i ph\u00e2n quy\u1ec1n trong E-Business Suite, t\u00e1ch bi\u1ec7t t\u00e0i kho\u1ea3n d\u1ecbch v\u1ee5, x\u00e1c minh c\u00e1c t\u00edch h\u1ee3p thanh to\u00e1n v\u00e0 chu\u1ea9n b\u1ecb ph\u01b0\u01a1ng \u00e1n c\u00f4 l\u1eadp nhanh n\u1ebfu ph\u00e1t hi\u1ec7n h\u00e0nh vi nghi v\u1ea5n. V\u1edbi h\u1ec7 th\u1ed1ng quan tr\u1ecdng, m\u1ed9t v\u00f2ng ki\u1ec3m tra forensics c\u01a1 b\u1ea3n sau v\u00e1 l\u00e0 c\u1ea7n thi\u1ebft \u0111\u1ec3 tr\u00e1nh b\u1ecf s\u00f3t d\u1ea5u hi\u1ec7u x\u00e2m nh\u1eadp tr\u01b0\u1edbc \u0111\u00f3.<\/p>\n

Lessons from the incident<\/h2>\n

CVE-2026-46817 ti\u1ebfp t\u1ee5c cho th\u1ea5y c\u00e1c \u1ee9ng d\u1ee5ng nghi\u1ec7p v\u1ee5 l\u00f5i kh\u00f4ng th\u1ec3 \u0111\u01b0\u1ee3c xem l\u00e0 h\u1ec7 th\u1ed1ng n\u1ed9i b\u1ed9 \u00edt r\u1ee7i ro. Khi c\u00e1c n\u1ec1n t\u1ea3ng ERP, thanh to\u00e1n v\u00e0 t\u00e0i ch\u00ednh k\u1ebft n\u1ed1i s\u00e2u v\u1edbi nhi\u1ec1u b\u1ed9 ph\u1eadn, m\u1ed9t l\u1ed7i x\u00e1c th\u1ef1c ho\u1eb7c ph\u00e2n quy\u1ec1n c\u00f3 th\u1ec3 tr\u1edf th\u00e0nh \u0111i\u1ec3m v\u00e0o tr\u1ef1c ti\u1ebfp cho t\u1ea5n c\u00f4ng quy m\u00f4 l\u1edbn.<\/p>\n

V\u1edbi ng\u01b0\u1eddi qu\u1ea3n tr\u1ecb, \u01b0u ti\u00ean l\u00fac n\u00e0y l\u00e0 x\u00e1c \u0111\u1ecbnh h\u1ec7 th\u1ed1ng c\u00f3 ch\u1ecbu \u1ea3nh h\u01b0\u1edfng hay kh\u00f4ng, v\u00e1 theo h\u01b0\u1edbng d\u1eabn c\u1ee7a Oracle, gi\u1edbi h\u1ea1n truy c\u1eadp HTTP kh\u00f4ng c\u1ea7n thi\u1ebft v\u00e0 l\u01b0u l\u1ea1i b\u1eb1ng ch\u1ee9ng ki\u1ec3m tra. V\u1edbi ban l\u00e3nh \u0111\u1ea1o, \u0111\u00e2y l\u00e0 l\u1eddi nh\u1eafc r\u1eb1ng qu\u1ea3n l\u00fd b\u1ea3n v\u00e1 cho h\u1ec7 th\u1ed1ng nghi\u1ec7p v\u1ee5 ph\u1ea3i \u0111\u01b0\u1ee3c \u0111\u1eb7t ngang h\u00e0ng v\u1edbi h\u1ea1 t\u1ea7ng b\u1ea3o m\u1eadt truy\u1ec1n th\u1ed1ng.<\/p>\n

VNCyberS<\/strong> t\u1ed5ng h\u1ee3p t\u1eeb CISA, Oracle, BleepingComputer v\u00e0 Beazley Security<\/em><\/p>","protected":false},"excerpt":{"rendered":"

CISA \u0111\u01b0a CVE-2026-46817 trong Oracle E-Business Suite v\u00e0o danh m\u1ee5c KEV sau khi ghi nh\u1eadn khai th\u00e1c th\u1ef1c t\u1ebf, y\u00eau c\u1ea7u x\u1eed l\u00fd kh\u1ea9n tr\u01b0\u1edbc ng\u00e0y 18\/07\/2026.<\/p>","protected":false},"author":2,"featured_media":1769,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[1],"tags":[23,167,398,401,399,400,396,397,395,402],"class_list":["post-1771","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tin-tuc","tag-bao-mat-doanh-nghiep","tag-cisa-kev","tag-cve-2026-46817","tag-file-transmission","tag-lo-hong-dang-bi-khai-thac","tag-oracle","tag-oracle-e-business-suite","tag-oracle-payments","tag-quan-ly-ban-va","tag-tin-tuc-an-ninh-mang"],"_links":{"self":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1771","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/comments?post=1771"}],"version-history":[{"count":0,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1771\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media\/1769"}],"wp:attachment":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media?parent=1771"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/categories?post=1771"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/tags?post=1771"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}