CVE-2026-70827
HighCVSS 7.7Exploitation Probability (EPSS)
Low risk27th percentile - higher than 27% of all known CVEs
Summary
Vulnerability in Oracle MES for Process Manufacturing product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. A low-privileged attacker can gain full access to data via HTTP, and attacks may impact additional products (scope change).
Risk Assessment
Risk includes unauthorized access to production data and potential impact on other systems, potentially leading to broader breaches.
Recommendation
Apply Oracle patches for versions 12.2.3-12.2.15 and restrict access to authorized personnel only.
Other vulnerabilities in Oracle MES for Process Manufacturing
See all- CVE-2026-61340High
Vulnerability in Oracle MES for Process Manufacturing (component: Internal Operations) in versions 12.2.3-12.2.15. An unauthenticated attacker with network access via HTTP can compromise the system, but user interaction is required. The attack may impact other products (scope change) and lead to unauthorized access to critical data and modification of some data.
- CVE-2026-61101High
A vulnerability in Oracle MES for Process Manufacturing (Internal Operations component) versions 12.2.3-12.2.15. Easily exploitable, requires network access via HTTP and user interaction. Successful attack can lead to unauthorized access to critical data and data modification. CVSS 8.2.
Original NVD description (English source)
Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle MES for Process Manufacturing. While the vulnerability is in Oracle MES for Process Manufacturing, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle MES for Process Manufacturing accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS