CVE-2026-70700
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
Vulnerability in Oracle Payables (component: Internal Operations) versions 12.2.3-12.2.15. An unauthenticated attacker can cause a hang or frequent crashes (full DoS) of Oracle Payables via HTTP.
Risk Assessment
Risk includes complete unavailability of Oracle Payables, potentially disrupting financial operations.
Recommendation
Apply Oracle patches for Oracle Payables and consider implementing DoS protection mechanisms.
Other vulnerabilities in Oracle Payables
See all- CVE-2026-70701High
Vulnerability in Oracle Payables (component: Internal Operations) versions 12.2.3-12.2.15. A low-privileged attacker can gain unauthorized access to critical data and modify or delete it via HTTP.
- CVE-2026-61320High
Vulnerability in Oracle Payables (Oracle E-Business Suite) component Internal Operations. Versions 12.2.8-12.2.15 are affected. A low-privileged attacker with network access via HTTP can compromise Oracle Payables.
Original NVD description (English source)
Vulnerability in the Oracle Payables product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Payables. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Payables. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS