CVE-2026-70795

HighCVSS 8.1

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

22th percentile - higher than 22% of all known CVEs

Summary

Vulnerability in Oracle Applications Platform Engineering product of Oracle E-Business Suite (component: Valid Session). Affects versions 12.2.3-12.2.15. Difficult to exploit, allows unauthenticated attacker with network access via Oracle Net to take over Oracle Applications Platform Engineering.

Risk Assessment

Risk of complete takeover of the platform, potentially leading to full compromise of confidentiality, integrity and availability of data and services.

Recommendation

Apply Oracle patches for versions 12.2.3-12.2.15. Restrict network access to Oracle Net and monitor for unusual activity.

Original NVD description (English source)

Vulnerability in the Oracle Applications Platform Engineering product of Oracle E-Business Suite (component: Valid Session). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Oracle Applications Platform Engineering. Successful attacks of this vulnerability can result in takeover of Oracle Applications Platform Engineering. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).