Threat Intelligence Database

CVE-2026-70810 is a high-severity vulnerability in Oracle Scripting, part of Oracle E-Business Suite. It affects versions 12.2.3 through 12.2.15. The flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical or all accessible Oracle Scripting data. The vulnerability has a CVSS 3.1 base score of 7.5, indicating significant confidentiality impact without integrity or availability effects. Oracle has published a Critical Security Patch Update advisory covering this and many other vulnerabilities, urging customers to apply patches promptly.

CVE-2026-60976 is a high-severity vulnerability in Oracle Scripting, part of Oracle E-Business Suite. It affects versions 12.2.3 through 12.2.15. The flaw allows a low privileged attacker with network access via HTTP to compromise Oracle Scripting, potentially leading to full takeover of the component. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high impact on confidentiality, integrity, and availability. Oracle has addressed this vulnerability in its August 2026 Critical Security Patch Update, which includes targeted fixes for this and many other vulnerabilities. Oracle strongly recommends applying the provided patches promptly to mitigate the risk.

Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Scripting Admin). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Scripting. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Scripting accessible data as well as unauthorized read access to a subset of Oracle Scripting accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).

Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Scripting Admin). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Scripting. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Scripting, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Scripting accessible data as well as unauthorized read access to a subset of Oracle Scripting accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).

MediumVulnerabilityUnited KingdomGermanyFrance+5#cve#cve-2026-21943

Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: iSurvey Module). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Scripting. Successful attacks of this vulnerability can result in takeover of Oracle Scripting. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

CriticalVulnerabilityUnited StatesIndiaUnited Kingdom+9#cve#cve-2025-30727