CVE-2026-70700

HighCVSS 7.5

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.46%

38th percentile - higher than 38% of all known CVEs

Summary

Vulnerability in Oracle Payables (component: Internal Operations) versions 12.2.3-12.2.15. An unauthenticated attacker can cause a hang or frequent crashes (full DoS) of Oracle Payables via HTTP.

Risk Assessment

Risk includes complete unavailability of Oracle Payables, potentially disrupting financial operations.

Recommendation

Apply Oracle patches for Oracle Payables and consider implementing DoS protection mechanisms.

Original NVD description (English source)

Vulnerability in the Oracle Payables product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Payables. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Payables. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).