CVE-2026-70772

Oracle E-Business Suite 12.2.3–12.2.15 (component: Internal Operations) has an unauthenticated, network-exploitable flaw via HTTP that can expose all Warehouse Management data (CVSS 7.5). Apply Oracle's CSP Aug 2026 patch (https://www.oracle.com/security-alerts/cspuaug2026.html). No in-the-wild e...

CVE-2026-70770

CVE-2026-70770 affects the Oracle Warehouse Management component (Internal Operations) of Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to perform unauthorized creation, deletion, or modification o...

CVE-2026-70771

CVE-2026-70771 affects Oracle E-Business Suite (Warehouse Management, Internal Operations component), versions 12.2.3–12.2.15. A low-privileged attacker with network access via HTTPS can exploit it (CVSS 7.7, HIGH) to gain unauthorized read access to critical data across all accessible Warehouse ...

CVE-2026-60898

CVE-2026-60898 affects Oracle E-Business Suite’s Oracle Warehouse Management (Internal Operations) with affected product versions 12.2.3 through 12.2.15. The vulnerability is exploitable by a low-privilege attacker over HTTP with network access, potentially leading to takeover of Oracle Warehouse...

CVE-2026-70774

CVE-2026-70774 affects the Oracle Warehouse Management component (Internal Operations) of Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to perform unauthorized creation, deletion, or modification o...