CVE-2026-70770
HighCVSS 8.3Exploitation Probability (EPSS)
Low risk30th percentile - higher than 30% of all known CVEs
Summary
Vulnerability in Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. Easily exploitable by low-privileged attacker via HTTP. Allows unauthorized creation, deletion, or modification of critical data, unauthorized access, and partial denial of service.
Risk Assessment
Risk includes breach of confidentiality, integrity, and availability, potentially disrupting warehouse operations and causing losses.
Recommendation
Apply Oracle patches and restrict user privileges and network access.
Other vulnerabilities in Oracle Warehouse Management
See all- CVE-2026-70774High
Vulnerability in Oracle Warehouse Management (component: Internal Operations) versions 12.2.3-12.2.15. A low-privileged attacker can modify data and cause partial denial of service. CVSS 7.1.
- CVE-2026-70772High
Vulnerability in Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. Easily exploitable by unauthenticated attacker via HTTP, allowing unauthorized access to critical data or complete access to all product data.
- CVE-2026-70771High
Vulnerability in Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. Easily exploitable by low-privileged attacker via HTTPS, with potential impact on other products (scope change). Allows unauthorized access to critical data or complete access to all product data.
- CVE-2026-60898High
Vulnerability in Oracle Warehouse Management (Internal Operations component) versions 12.2.3-12.2.15. Easily exploitable, allows a low-privileged attacker with network access via HTTP to take over the warehouse management system.
Original NVD description (English source)
Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Warehouse Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Warehouse Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Warehouse Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Warehouse Management. CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS