Threat Intelligence Database

CVE-2026-70820 is a vulnerability in Oracle Call Center Technology, part of Oracle E-Business Suite Internal Operations. It affects versions 12.2.3 through 12.2.15. The flaw allows a high privileged attacker with network access via HTTP to compromise the product, potentially leading to full takeover. The CVSS 3.1 base score is 7.2, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update, which contains numerous security fixes across multiple products.

CVE-2026-70814 is a high-severity vulnerability in Oracle Call Center Technology, part of Oracle E-Business Suite. It affects versions 12.2.3 through 12.2.15. The flaw allows an unauthenticated attacker with network access via HTTP to potentially take over the affected system. The vulnerability has a CVSS 3.1 base score of 8.1, indicating high impact on confidentiality, integrity, and availability. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update, which provides patches for this and many other vulnerabilities.

CVE-2026-70813 is a high-severity vulnerability in Oracle Call Center Technology versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to compromise the product, potentially leading to full takeover. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 8.8. Oracle has included this fix in its August 2026 Critical Security Patch Update, which contains numerous security patches across multiple products.

CVE-2026-70812 is a high-severity vulnerability in Oracle Call Center Technology, part of Oracle E-Business Suite. It affects versions from 12.2.3 through 12.2.15. The flaw allows a low privileged attacker with network access via HTTP to compromise the product, potentially leading to full takeover. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high impact on confidentiality, integrity, and availability. Oracle has released security patches addressing this and many other vulnerabilities in its August 2026 Critical Security Patch Update. Customers are strongly advised to apply these patches promptly to mitigate risk.

CVE-2026-70807 is a high-severity vulnerability in Oracle Call Center Technology versions 12.2.3 through 12.2.15. It allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data and perform unauthorized modifications such as update, insert, or delete operations. The vulnerability affects the Internal Operations component of Oracle E-Business Suite and may impact additional Oracle products due to scope change. The CVSS 3.1 base score is 8.5, indicating significant confidentiality and integrity impacts.

Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: RDBMS and UI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Call Center Technology. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Call Center Technology accessible data as well as unauthorized read access to a subset of Oracle Call Center Technology accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).