CVE-2026-70760

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Order Management versions 12.2.3 through 12.2.15

Description A flaw exists in the Product Diagnostic Tools component of Oracle Order Management. A low privileged attacker with network access via HTTP can compromise the system, potentially impacting additional products due to a scope change. Successful exploitation may lead to unauthorized access to critical data, complete access to all accessible Oracle Order Management data, and unauthorized ability to update, insert, or delete specific data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.