Threat Intelligence Database

CVE-2026-70829 is a vulnerability in Oracle Process Manufacturing Systems, part of Oracle E-Business Suite. It affects versions 12.2.3 through 12.2.15. The flaw allows a low privileged attacker with network access via HTTP to potentially compromise the system, leading to full takeover. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with impacts on confidentiality, integrity, and availability. Exploitation is considered difficult due to the required conditions. Oracle has released security patches addressing this and other vulnerabilities in their August 2026 Critical Security Patch Update. Customers are strongly advised to apply these patches promptly to mitigate risk.

CVE-2026-61285 is a high-severity vulnerability in Oracle Process Manufacturing Systems versions 12.2.11 through 12.2.15. It allows a high privileged attacker with network access via HTTP to compromise the system, potentially resulting in full takeover. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 7.2. Oracle has acknowledged the issue but has not explicitly confirmed patch availability in the provided advisory. Users are advised to consult Oracle's Critical Patch Update advisory for remediation details.