CVE-2026-70774
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
Vulnerability in Oracle Warehouse Management (component: Internal Operations) versions 12.2.3-12.2.15. A low-privileged attacker can modify data and cause partial denial of service. CVSS 7.1.
Risk Assessment
Unauthorized modification of warehouse data and partial system unavailability, potentially disrupting logistics operations.
Recommendation
Apply Oracle patches. Restrict user privileges to the minimum necessary.
Other vulnerabilities in Oracle Warehouse Management
See all- CVE-2026-70772High
Vulnerability in Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. Easily exploitable by unauthenticated attacker via HTTP, allowing unauthorized access to critical data or complete access to all product data.
- CVE-2026-70771High
Vulnerability in Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. Easily exploitable by low-privileged attacker via HTTPS, with potential impact on other products (scope change). Allows unauthorized access to critical data or complete access to all product data.
- CVE-2026-70770High
Vulnerability in Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. Easily exploitable by low-privileged attacker via HTTP. Allows unauthorized creation, deletion, or modification of critical data, unauthorized access, and partial denial of service.
- CVE-2026-60898High
Vulnerability in Oracle Warehouse Management (Internal Operations component) versions 12.2.3-12.2.15. Easily exploitable, allows a low-privileged attacker with network access via HTTP to take over the warehouse management system.
Original NVD description (English source)
Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Warehouse Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Warehouse Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Warehouse Management. CVSS 3.1 Base Score 7.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS