CVE-2026-101647 is a vulnerability in Oracle iSetup within Oracle E-Business Suite versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to potentially compromise the Oracle iSetup component. The vulnerability is difficult to exploit but can lead to full takeover of Oracle iSetup if successfully exploited. The CVSS 3.1 base score is 7.5, indicating high severity with impacts on confidentiality, integrity, and availability.
CVE-2026-101646 is a vulnerability in Oracle iSetup component of Oracle E-Business Suite versions 12.2.3 through 12.2.15. It allows a high privileged attacker with network access via HTTP to fully compromise Oracle iSetup, resulting in complete takeover. The vulnerability has a CVSS 3.1 base score of 7.2, indicating high severity with impacts on confidentiality, integrity, and availability.
CVE-2026-101645 is a vulnerability in Oracle iSetup, part of Oracle E-Business Suite, affecting versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to potentially take over the Oracle iSetup component. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has published a Critical Patch Update advisory addressing this and many other vulnerabilities. Users are strongly advised to apply the available patches promptly.
CVE-2026-70713 is a vulnerability in Oracle iSetup, part of Oracle E-Business Suite, affecting versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to potentially take over Oracle iSetup. The vulnerability is rated high severity with a CVSS 3.1 base score of 7.5, impacting confidentiality, integrity, and availability. The vulnerability is difficult to exploit and requires high attack complexity. Oracle has included this fix in their August 2026 Critical Security Patch Update.
Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iSetup. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle iSetup accessible data as well as unauthorized access to critical data or complete access to all Oracle iSetup accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N).
Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iSetup. Successful attacks of this vulnerability can result in takeover of Oracle iSetup. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).