CVE-2026-70845

Oracle E-Business Suite 12.2.3-12.2.15's Loans product, Internal Operations component, allows a low-privileged remote attacker via HTTP to create, delete, or modify critical Loans data and cause partial denial of service (CVSS 7.1 HIGH). Oracle's August 2026 CPU advisory is the remediation source.