Threat Intelligence Database

CVE-2026-70803 is a high-severity vulnerability in Oracle General Ledger (part of Oracle E-Business Suite) versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to perform unauthorized creation, deletion, or modification of critical data, unauthorized read access to some data, and cause a partial denial of service. The vulnerability has a CVSS 3.1 base score of 7.6, indicating significant confidentiality, integrity, and availability impacts.

CVE-2026-70764 is a high-severity vulnerability in Oracle General Ledger within Oracle E-Business Suite versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data, perform unauthorized data modifications, and cause a partial denial of service. The vulnerability has a CVSS 3.1 base score of 7.6, indicating significant confidentiality, integrity, and availability impacts. Oracle has released security patches addressing this and many other vulnerabilities in its August 2026 Critical Security Patch Update. Customers are strongly advised to apply these patches promptly to mitigate risk.

CVE-2026-70686 is a high-severity vulnerability in Oracle General Ledger, part of Oracle E-Business Suite. It affects versions from 12.2.3 through 12.2.15. The flaw allows a low privileged attacker with network access via HTTP to compromise the product, potentially leading to full takeover. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high impact on confidentiality, integrity, and availability. Oracle has included this fix in its August 2026 Critical Security Patch Update.

CVE-2026-60769 is a vulnerability in Oracle General Ledger within Oracle E-Business Suite versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to potentially take over the Oracle General Ledger component. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with impacts on confidentiality, integrity, and availability. Exploitation is considered difficult due to the required conditions. Oracle has released security patches addressing this and other vulnerabilities in their August 2026 Critical Security Patch Update.

CVE-2026-60748 is a vulnerability in Oracle General Ledger component of Oracle E-Business Suite versions 12.2.3 through 12.2.15. It allows a high privileged attacker with network access via HTTP to compromise the product, potentially gaining unauthorized access to critical data and the ability to update, insert, or delete some data. The vulnerability has a CVSS 3.1 base score of 7.6, indicating high severity with significant confidentiality and integrity impacts. Oracle has released security patches addressing this and many other vulnerabilities in their August 2026 Critical Security Patch Update advisory.

CVE-2026-60693 is a high severity vulnerability in Oracle General Ledger component of Oracle E-Business Suite versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to potentially compromise the system. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, unauthorized access to all accessible data, and partial denial of service of Oracle General Ledger.