CVE-2026-70696

HighCVSS 7.5

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.30%

23th percentile - higher than 23% of all known CVEs

Summary

Vulnerability in Oracle Payments product of Oracle E-Business Suite, component File Transmission. Affects versions 12.2.3-12.2.15. An unauthenticated attacker with network access via TCP can compromise Oracle Payments, resulting in unauthorized access to critical data or complete access to all Oracle Payments accessible data. CVSS 7.5 (Confidentiality impact).

Risk Assessment

The risk is potential full breach of confidentiality of data processed by Oracle Payments, potentially leading to exposure of sensitive financial information.

Recommendation

Apply Oracle patches immediately for affected versions and restrict network access to the TCP service.

Original NVD description (English source)

Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Payments. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Payments accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).