CVE-2026-70779

HighCVSS 7.4

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.34%

27th percentile - higher than 27% of all known CVEs

Summary

Vulnerability in Oracle iSupplier Portal (component: Internal Operations) versions 12.2.3-12.2.15. Difficult to exploit, but an unauthenticated attacker can modify and access critical data. CVSS 7.4.

Risk Assessment

Unauthorized modification and access to critical supplier portal data, potentially compromising integrity and confidentiality.

Recommendation

Apply Oracle patches. Monitor HTTP traffic for suspicious requests.

Original NVD description (English source)

Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iSupplier Portal. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle iSupplier Portal accessible data as well as unauthorized access to critical data or complete access to all Oracle iSupplier Portal accessible data. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).