CVE-2026-70805

Oracle E-Business Suite's Project Planning and Control component (Change Management) is vulnerable in versions 12.2.3-12.2.15; a low-privileged attacker with network HTTP access can compromise data confidentiality and integrity (CVSS 8.1). Oracle's August 2026 CPU advisory provides the patch.