Threat Intelligence Database

CVE-2026-70792 is a high-severity vulnerability in Oracle Yard Management, part of Oracle E-Business Suite. It affects versions 12.2.3 through 12.2.15. The flaw allows a low privileged attacker with network access via HTTP to compromise the system, potentially leading to full takeover. The CVSS 3.1 base score is 8.8, indicating high impact on confidentiality, integrity, and availability. Oracle has published a Critical Security Patch Update advisory covering this and many other vulnerabilities, urging customers to apply patches promptly. No specific patch link for this vulnerability was provided in the input, but Oracle’s advisory is the authoritative source for remediation status.

CVE-2026-62496 is a high-severity vulnerability in Oracle Yard Management (part of Oracle E-Business Suite) versions 12.2.6 through 12.2.15. It allows a low privileged attacker with network access via HTTP to compromise the product, potentially leading to full takeover. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 8.8. Oracle has published a Critical Patch Update advisory in July 2026 covering multiple products, but no specific patch for this vulnerability is explicitly confirmed in the advisory content provided.