CVE-2026-70777
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
Vulnerability in Oracle iSupplier Portal (component: Internal Operations) versions 12.2.3-12.2.15. An unauthenticated attacker can gain full access to portal data. Easily exploitable, CVSS 7.5.
Risk Assessment
Full unauthorized access to supplier portal data, potentially compromising confidentiality.
Recommendation
Apply Oracle patches. Restrict network access to the portal.
Other vulnerabilities in Oracle iSupplier Portal
See all- CVE-2026-70779High
Vulnerability in Oracle iSupplier Portal (component: Internal Operations) versions 12.2.3-12.2.15. Difficult to exploit, but an unauthenticated attacker can modify and access critical data. CVSS 7.4.
- CVE-2026-46957High
Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. It allows a low privileged attacker with network access via HTTP to compromise Oracle iSupplier Portal.
Original NVD description (English source)
Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iSupplier Portal. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle iSupplier Portal accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS