CVE-2026-70781

HighCVSS 7.2

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.47%

39th percentile - higher than 39% of all known CVEs

Summary

Vulnerability in Oracle Proposals (component: Internal Operations) versions 12.2.3-12.2.15. A high-privileged attacker can take over the system. Easily exploitable, CVSS 7.2.

Risk Assessment

Takeover of Oracle Proposals could lead to full compromise of confidentiality, integrity, and availability of data.

Recommendation

Apply Oracle patches. Restrict system access to trusted administrators only.

Original NVD description (English source)

Vulnerability in the Oracle Proposals product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Proposals. Successful attacks of this vulnerability can result in takeover of Oracle Proposals. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).