CVE-2026-70775

A low-privileged, network-based attacker can exploit the User Interface component in Oracle E-Business Suite versions 12.2.3–12.2.15 to gain unauthorized read, write, and partial denial-of-service access to Installed Base data (CVSS 6.3 Medium). Oracle's August 2026 CPU advisory is the primary re...