CVE-2026-70947

Oracle Purchasing in E-Business Suite versions 12.2.3 through 12.2.15 is affected by an unauthenticated, network-accessible vulnerability (CVSS 7.5 HIGH) that can expose critical data. Oracle's August 2026 CPU advisory is the source for patch details; no exploit code is provided in the documents.