CVE-2026-70695

HighCVSS 7.7

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.30%

23th percentile - higher than 23% of all known CVEs

Summary

Vulnerability in Oracle Payments (File Transmission component) versions 12.2.3-12.2.15. A high privileged attacker with network access via HTTP can compromise Oracle Payments, with scope change affecting other products. Successful attacks can result in unauthorized creation, deletion, modification, and access to critical data. CVSS 7.7 (Confidentiality and Integrity impacts).

Risk Assessment

Risk includes integrity and confidentiality breach of Oracle Payments data and potential impact on other systems, potentially disrupting operations and causing loss of trust.

Recommendation

Apply Oracle patches, restrict HTTP access, and monitor high-privileged user activity.

Original NVD description (English source)

Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Payments. While the vulnerability is in Oracle Payments, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Payments accessible data as well as unauthorized access to critical data or complete access to all Oracle Payments accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N).