CVE-2026-70710

CVE-2026-70710 affects the Security API component of Oracle Sales Foundation in Oracle E-Business Suite, versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve full takeover of the Sales Foundation component, resulting in...

CVE-2026-70708

The Security API component of Oracle E-Business Suite Sales Foundation (versions 12.2.3–12.2.15) has a HIGH severity (CVSS 8.1) flaw allowing low-privileged, unauthenticated network attackers to create, delete, or modify critical data and gain full data access. No exploitation evidence is provide...

CVE-2026-70707

Oracle Sales for Handhelds (component: Internal Operations) in Oracle E-Business Suite versions 12.2.3–12.2.15 is vulnerable to a low-complexity network attack requiring only low privileges via HTTP, enabling full product takeover with high confidentiality, integrity, and availability impact (CVS...

CVE-2026-70706

CVE-2026-70706 affects Oracle Sales (Internal Operations) in E-Business Suite versions 12.2.3–12.2.15. A low-privileged, network-accessible attacker can exploit it via HTTP to take over Oracle Sales (CVSS 7.5 HIGH, C/I/A impacts). No exploit code or in-the-wild activity is provided in the documen...

CVE-2026-70705

The affected product is Oracle Hyperion Calculation Manager (Security component), version 11.2.25.0.000. CVSS 3.1 vector AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N yields a HIGH score of 7.1, reflecting high confidentiality impact with scope change. An unauthenticated attacker with infrastructure-level ...

CVE-2026-70704

Oracle E-Business Suite 12.2.3–12.2.15 Party Search UI has a HIGH-severity (CVSS 8.1) flaw exploitable over HTTP by unauthenticated attackers, enabling full compromise of the Trading Community component. No exploitation evidence is provided. Patch details: Oracle CSP August 2026 advisory. Monitor...

CVE-2026-70703

Oracle Agile Engineering Data Management (Supply Chain, Engineering Communication Interface) version 6.2.1 is affected by a HIGH-severity (CVSS 8.2) network-based flaw allowing low-privileged attackers to gain unauthorized read/write access to critical data; no exploitation or patch details are p...

CVE-2026-70702

Oracle E-Business Suite Payments (File Transmission component) versions 12.2.3–12.2.15 are affected by a high-severity (CVSS 8.2) vulnerability exploitable by unauthenticated attackers over HTTP, enabling unauthorized read of critical data and limited write/delete access. Oracle's August 2026 Cri...

CVE-2026-70700

CVE-2026-70700 affects the Oracle Payables product of Oracle E-Business Suite (component: Internal Operations ), versions 12.2.3 through 12.2.15 . An unauthenticated attacker with network access via HTTP can trigger a hang or frequently repeatable crash, resulting in a complete denial of service ...

CVE-2026-70701

Affected: Oracle E-Business Suite Payables, component Internal Operations, versions 12.2.3–12.2.15. A low-privileged network attacker can compromise Payables data confidentiality and integrity (CVSS 8.1, HIGH). Exploitation details are not provided. Apply Oracle Critical Patch Update referenced a...

CVE-2026-70699

CVE-2026-70699 affects Oracle E-Business Suite Payments (File Transmission component), versions 12.2.3–12.2.15. An unauthenticated network attacker can exploit it to gain unauthorized read/write access to critical Payments data. CVSS 7.4 (HIGH); no in-the-wild exploitation reported. Patch details...

CVE-2026-70698

Oracle Agile Engineering Data Management 6.2.1 (Install component) is vulnerable to local privilege escalation by a high-privileged attacker, enabling full product takeover. CVSS 3.1 base score 6.7 (AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). No exploitation details provided; Oracle security advisory r...

CVE-2026-70697

CVE-2026-70697 affects Oracle Agile Engineering Data Management 6.2.1, specifically the Engineering Communication Interface component. A low-privileged attacker with local access can exploit this HIGH-severity (CVSS 7.0) flaw to fully compromise the application. Oracle's August 2026 security advi...

CVE-2026-70695

CVE-2026-70695 affects the File Transmission component of Oracle Payments within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A high-privileged attacker with network access via HTTP can exploit this vulnerability to perform unauthorized creation, deletion, or modification of critic...

CVE-2026-70694

CVE-2026-70694 affects the File Transmission component of Oracle Payments in Oracle E-Business Suite, versions 12.2.3 through 12.2.15 . A high-privileged attacker with network access via HTTP can exploit this vulnerability, though it is rated as difficult to exploit (high attack complexity). Due ...

CVE-2026-70696

Oracle Payments (component: File Transmission) in Oracle E-Business Suite versions 12.2.3–12.2.15 is vulnerable to an unauthenticated, network-based TCP attack (CVSS 7.5 HIGH). Successful exploitation grants unauthorized access to critical data or full Oracle Payments dataset, impacting confident...

CVE-2026-70693

Oracle Agile Engineering Data Management (version 6.2.1) component Engineering Communication Interface has a local, high-complexity vulnerability requiring high privileges and human interaction; successful exploitation yields full system takeover (CVSS 6.3 MEDIUM). No exploit code or patch detail...

CVE-2026-70691

Oracle Agile Engineering Data Management 6.2.1's Engineering Communication Interface has a HIGH-severity (CVSS 7.5) flaw: an unauthenticated attacker with physical access to the communication segment can fully compromise the application (C/I/A impacts). No patch version is specified; Oracle's Aug...

CVE-2026-70692

A HIGH-severity vulnerability (CVSS 7.7) in Oracle E-Business Suite's Marketing Encyclopedia System (component: Internal Operations) affects versions 12.2.3-12.2.15. A low-privileged network attacker via HTTP can gain unauthorized access to all MES-accessible data, with potential scope change imp...

CVE-2026-70689

Oracle Essbase 21.8.1.0.0 (Infrastructure component) has a critical CVSS 9.8 flaw exploitable by an unauthenticated attacker over HTTP, leading to full system takeover. No exploit details or confirmed in-the-wild exploitation are provided; Oracle's August 2026 CPU patches this issue.