Threat Intelligence Database

CVE-2026-70827 is a vulnerability in Oracle MES for Process Manufacturing within Oracle E-Business Suite versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to compromise the product, potentially leading to unauthorized access to critical or all accessible data. The vulnerability has a CVSS 3.1 base score of 7.7, indicating high severity, with a confidentiality impact but no integrity or availability impact. The vulnerability may also affect additional Oracle products due to scope change. Oracle has released a Critical Security Patch Update in August 2026 addressing this and many other vulnerabilities. Customers are strongly advised to apply Oracle's security patches promptly to mitigate this risk.

CVE-2026-61340 is a high-severity vulnerability in Oracle MES for Process Manufacturing (part of Oracle E-Business Suite) versions 12.2.3 through 12.2.15. It allows an unauthenticated attacker with network access via HTTP to compromise the product, requiring human interaction from a third party. Successful exploitation can lead to unauthorized access to critical data and unauthorized modification of some data. The vulnerability has a CVSS 3.1 base score of 8.2, indicating significant confidentiality and integrity impacts. Oracle has published a Critical Security Patch Update advisory recommending timely patching to mitigate this and other vulnerabilities.

CVE-2026-61101 is a high-severity vulnerability in Oracle MES for Process Manufacturing versions 12.2.3 through 12.2.15. It allows an unauthenticated attacker with network access via HTTP to compromise the product, requiring user interaction from a person other than the attacker. Successful exploitation can lead to unauthorized access to critical data and unauthorized modification of some data. The vulnerability also has potential to impact additional Oracle products beyond MES for Process Manufacturing. The CVSS 3.1 base score is 8.2, reflecting high confidentiality impact and limited integrity impact.

Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite (component: Device Integration). Supported versions that are affected are 12.2.12-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle MES for Process Manufacturing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle MES for Process Manufacturing, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle MES for Process Manufacturing accessible data as well as unauthorized read access to a subset of Oracle MES for Process Manufacturing accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).

MediumVulnerabilityGermanyFranceItaly+7#cve#cve-2025-30745