CVE-2026-70686

Vulnerability in Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. A low-privileged attacker can modify data, gain partial read access, and cause partial denial of service via HTTP.

Vulnerability in Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. Difficult to exploit, requires logon to the infrastructure and high privileges. Allows unauthorized creation, deletion or modification of critical data and unauthorized access to critical data. Attacks may impact additional products (scope change).

Vulnerability in Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. Easily exploitable by low-privileged attacker via HTTP. Allows unauthorized access to critical data, unauthorized update/insert/delete of some data, and partial denial of service.

Vulnerability in Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. Difficult to exploit, but a low-privileged attacker can via HTTP take over Oracle General Ledger. CVSS 7.5.

Vulnerability in Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. Easily exploitable, allows high privileged attacker via HTTP to gain unauthorized access to critical data and modify some data. Attack may impact other products (scope change).

Vulnerability in Oracle General Ledger (component: Internal Operations) in versions 12.2.3-12.2.15. A low-privileged attacker can remotely compromise the system via HTTP under difficult conditions. Attacks can result in unauthorized creation, deletion, or modification of data, unauthorized access to data, and partial denial of service.