CVE-2026-70792

A vulnerability in the Internal Operations component of Oracle Yard Management (Oracle E-Business Suite, versions 12.2.3–12.2.15) allows a low-privileged attacker with network HTTP access to compromise the application, with successful exploitation enabling full takeover (CVSS 3.1 base score 8.8, ...