CVE-2026-70686

HighCVSS 8.8

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.45%

37th percentile - higher than 37% of all known CVEs

Summary

Vulnerability in Oracle General Ledger (Internal Operations component) versions 12.2.3-12.2.15. A low privileged attacker with network access via HTTP can take over the system. CVSS 8.8 (Confidentiality, Integrity, Availability impacts).

Risk Assessment

Risk includes complete takeover of Oracle General Ledger, potentially leading to breach of financial data and disruption of accounting processes.

Recommendation

Apply Oracle patches, restrict HTTP access, and control user privileges.

Original NVD description (English source)

Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle General Ledger. Successful attacks of this vulnerability can result in takeover of Oracle General Ledger. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).