CVE-2026-70795

The Valid Session component in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is vulnerable. An unauthenticated remote attacker using Oracle Net can exploit this with high attack complexity, achieving full compromise (confidentiality, integrity, availability) — CVSS 3.1 base score 8.1 (H...