Threat Intelligence Database

CVE-2026-70710 is a high-severity vulnerability in Oracle Sales Foundation, part of Oracle E-Business Suite. It affects versions 12.2.3 through 12.2.15. The flaw allows a low privileged attacker with network access via HTTP to compromise the product, potentially leading to full takeover. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 8.8. Oracle has acknowledged the issue in their August 2026 Critical Security Patch Update advisory and recommends applying patches promptly.

CVE-2026-70708 is a high-severity vulnerability in Oracle Sales Foundation, part of Oracle E-Business Suite. It affects versions 12.2.3 through 12.2.15 and allows a low privileged attacker with network access via HTTP to compromise the product. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, or unauthorized access to all data accessible by Oracle Sales Foundation. The vulnerability has a CVSS 3.1 base score of 8.1, indicating high impact on confidentiality and integrity. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update advisory, which provides patches for many products including Oracle E-Business Suite. Customers are strongly advised to apply the relevant patches promptly to mitigate the risk.