This vulnerability exists in Oracle Call Center Technology within Oracle E-Business Suite versions 12.2.3 through 12.2.15. It allows an attacker with low privileges and network access via HTTP to compromise the system, potentially resulting in full takeover. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. Oracle's August 2026 Critical Security Patch Update advisory references multiple vulnerabilities across Oracle products but does not explicitly confirm patch availability or remediation details for this specific CVE.

An attacker with low privileges and network access via HTTP can exploit this vulnerability to fully compromise Oracle Call Center Technology, gaining control over the affected system. The impact affects confidentiality, integrity, and availability at a high level, potentially allowing unauthorized data access, modification, and service disruption.

Oracle has released a Critical Security Patch Update in August 2026 addressing numerous vulnerabilities across its product portfolio. Customers are strongly advised to remain on actively supported versions and apply Oracle security patches promptly. However, the specific patch status for CVE-2026-70812 is not explicitly confirmed in the provided advisory content. Users should consult the official Oracle advisory at https://www.oracle.com/security-alerts/cspuaug2026.html for the latest patch availability and installation instructions. Until a patch is confirmed and applied, consider restricting network access to Oracle Call Center Technology to trusted sources only.