Threat Intelligence Database

CVE-2026-70778 is a high-severity vulnerability in Oracle Customer Care within Oracle E-Business Suite versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to compromise the product, requiring human interaction from a third party. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, impacting Oracle Customer Care and potentially other products due to scope change.

CVE-2026-62607 is a high-severity vulnerability in Oracle Customer Care within Oracle E-Business Suite versions 12.2.3 through 12.2.15. It allows a high privileged attacker with network access via HTTP to compromise the product, potentially impacting additional Oracle products. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, as well as unauthorized access to all data accessible by Oracle Customer Care. The vulnerability has a CVSS 3.1 base score of 8.7, indicating significant confidentiality and integrity impacts. Oracle has published a Critical Security Patch Update advisory addressing this and many other vulnerabilities, strongly recommending patch application. No explicit patch link for this specific CVE was provided, but the vendor advisory is authoritative for remediation guidance.