CVE-2026-70783

Oracle Service Contracts (component: Internal Operations) in EBS 12.2.3-12.2.15 is vulnerable to unauthenticated remote HTTP attacks (CVSS 7.4 HIGH) enabling unauthorized read/write of critical data; no exploit details provided. Patches are available via Oracle's August 2026 CPU advisory.