Threat Intelligence Database

CVE-2026-70774 is a high-severity vulnerability in Oracle Warehouse Management within Oracle E-Business Suite versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to perform unauthorized creation, deletion, or modification of critical data and cause a partial denial of service. The vulnerability has a CVSS 3.1 base score of 7.1, indicating significant integrity and availability impacts. Oracle has published a Critical Security Patch Update advisory that includes patches for this and other vulnerabilities. Customers are strongly advised to apply the relevant patches promptly.

CVE-2026-70772 is a high-severity vulnerability in Oracle Warehouse Management, part of Oracle E-Business Suite. It affects versions 12.2.3 through 12.2.15. The flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical or all accessible data within Oracle Warehouse Management. The vulnerability has a CVSS 3.1 base score of 7.5, indicating a significant confidentiality impact without requiring privileges or user interaction.

CVE-2026-70771 is a high-severity vulnerability in Oracle Warehouse Management within Oracle E-Business Suite versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTPS to compromise the product, potentially leading to unauthorized access to critical or all accessible data. The vulnerability has a CVSS 3.1 base score of 7.7, indicating significant confidentiality impact with no integrity or availability impact. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update, which provides targeted security fixes across multiple products.

CVE-2026-70770 is a high-severity vulnerability in Oracle Warehouse Management, part of Oracle E-Business Suite. It affects versions 12.2.3 through 12.2.15. The flaw allows a low privileged attacker with network access via HTTP to gain unauthorized creation, deletion, or modification access to critical or all accessible data. It also enables unauthorized access to critical data and the ability to cause a partial denial of service. The vulnerability has a CVSS 3.1 base score of 8.3, indicating high impact on confidentiality, integrity, and availability.

Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Warehouse Management. Successful attacks of this vulnerability can result in takeover of Oracle Warehouse Management. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).