CVE-2026-70771
HighCVSS 7.7Exploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
Vulnerability in Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. Easily exploitable by low-privileged attacker via HTTPS, with potential impact on other products (scope change). Allows unauthorized access to critical data or complete access to all product data.
Risk Assessment
Risk includes data confidentiality breach and potential impact on other systems, expanding the attack surface.
Recommendation
Apply Oracle patches and monitor HTTPS traffic for suspicious activities.
Other vulnerabilities in Oracle Warehouse Management
See all- CVE-2026-70774High
Vulnerability in Oracle Warehouse Management (component: Internal Operations) versions 12.2.3-12.2.15. A low-privileged attacker can modify data and cause partial denial of service. CVSS 7.1.
- CVE-2026-70772High
Vulnerability in Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. Easily exploitable by unauthenticated attacker via HTTP, allowing unauthorized access to critical data or complete access to all product data.
- CVE-2026-70770High
Vulnerability in Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. Easily exploitable by low-privileged attacker via HTTP. Allows unauthorized creation, deletion, or modification of critical data, unauthorized access, and partial denial of service.
- CVE-2026-60898High
Vulnerability in Oracle Warehouse Management (Internal Operations component) versions 12.2.3-12.2.15. Easily exploitable, allows a low-privileged attacker with network access via HTTP to take over the warehouse management system.
Original NVD description (English source)
Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Warehouse Management. While the vulnerability is in Oracle Warehouse Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Warehouse Management accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS