CVE-2026-70775

A vulnerability in the Oracle Installed Base component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks require human interaction, potentially leading to unauthorized access to critical data.

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance), affecting versions 12.2.3-12.2.15. It allows a low privileged attacker with network access via HTTP to gain unauthorized creation, deletion or modification access to critical data as well as unauthorized access to Oracle Installed Base data.

Vulnerability in Oracle Installed Base (Create Item Instance component) versions 12.2.3-12.2.15. A low-privileged attacker via HTTP can modify data and cause partial DOS.

Vulnerability in Oracle Installed Base (component: Create Item Instance) in Oracle E-Business Suite. A low-privileged attacker via HTTP can compromise data confidentiality and integrity, gaining unauthorized access to critical data and the ability to create, delete, or modify it.

Vulnerability in Oracle Installed Base (component: Create Item Instance) versions 12.2.3-12.2.15. Easily exploitable, allows a low-privileged attacker via HTTP to gain unauthorized access to all data and modify some data.

Vulnerability in Oracle Installed Base (component: Create Item Instance) versions 12.2.4-12.2.15. Difficult to exploit; a low-privileged attacker via HTTP can gain unauthorized read, modify access and cause partial denial of service.

Vulnerability in Oracle Installed Base (Create Item Instance component) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and modify it.

Vulnerability in Oracle Installed Base (Create Item Instance component) versions 12.2.3-12.2.15. Low-privileged attacker via HTTP can take over the system.