CVE-2026-70829
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
Vulnerability in Oracle Process Manufacturing Systems product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. A low-privileged attacker can, under difficult conditions, take over the system, resulting in full compromise.
Risk Assessment
Risk includes complete takeover of the production system, potentially leading to data manipulation and service disruption.
Recommendation
Apply Oracle patches for versions 12.2.3-12.2.15 and monitor the system for unusual activity.
Other vulnerabilities in Oracle Process Manufacturing Systems
See all- CVE-2026-70830High
Vulnerability in Oracle Process Manufacturing Systems product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. A low-privileged attacker can gain full access to data and modify, create, or delete it via HTTP.
- CVE-2026-61000High
Vulnerability in Oracle Process Manufacturing Systems (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can compromise confidentiality and integrity, gaining unauthorized access to critical data and the ability to create, delete, or modify it.
Original NVD description (English source)
Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Process Manufacturing Systems. Successful attacks of this vulnerability can result in takeover of Oracle Process Manufacturing Systems. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS