CVE-2026-70815

Oracle Internet Procurement Connector (component: Internal Operations) in EBS 12.2.3–12.2.15 is vulnerable to a HIGH-severity (CVSS 8.1) flaw exploitable by a low-privileged remote attacker over HTTP, enabling unauthorized read/write access to all accessible procurement data. No exploitation evid...