CVE-2026-70773

HighCVSS 8.2

Published: 18/08/2026(UTC)Updated: 22/10/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.35%

28th percentile - higher than 28% of all known CVEs

Summary

Vulnerability in Oracle HCM Common Architecture (component: Knowledge Integration) versions 12.2.3-12.2.15. An unauthenticated attacker can access and modify critical data. Easily exploitable, CVSS 8.2.

Risk Assessment

Unauthorized access and modification of HR data, potentially compromising confidentiality and integrity.

Recommendation

Apply Oracle patches. Restrict network access to the service.

Other vulnerabilities in Oracle HCM Common Architecture

CVE-2026-60836High
In Oracle HCM Common Architecture (part of Oracle E-Business Suite, versions 12.2.3-12.2.15), a vulnerability in the Internal Operations component allows a high-privileged attacker via HTTP to take over the system.

Original NVD description (English source)

Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Knowledge Integration). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HCM Common Architecture. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle HCM Common Architecture accessible data as well as unauthorized update, insert or delete access to some of Oracle HCM Common Architecture accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS