CVE-2026-70779
HighCVSS 7.4Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
Vulnerability in Oracle iSupplier Portal (component: Internal Operations) versions 12.2.3-12.2.15. Difficult to exploit, but an unauthenticated attacker can modify and access critical data. CVSS 7.4.
Risk Assessment
Unauthorized modification and access to critical supplier portal data, potentially compromising integrity and confidentiality.
Recommendation
Apply Oracle patches. Monitor HTTP traffic for suspicious requests.
Other vulnerabilities in Oracle iSupplier Portal
See all- CVE-2026-70777High
Vulnerability in Oracle iSupplier Portal (component: Internal Operations) versions 12.2.3-12.2.15. An unauthenticated attacker can gain full access to portal data. Easily exploitable, CVSS 7.5.
- CVE-2026-46957High
Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. It allows a low privileged attacker with network access via HTTP to compromise Oracle iSupplier Portal.
Original NVD description (English source)
Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iSupplier Portal. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle iSupplier Portal accessible data as well as unauthorized access to critical data or complete access to all Oracle iSupplier Portal accessible data. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS