CVE-2026-70932

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Order Management versions 12.2.3 through 12.2.15

Description An issue exists in the Product Diagnostic Tools component of Oracle Order Management. A high privileged attacker with access to the infrastructure where the software executes can compromise the system. This may lead to unauthorized access, creation, deletion, or modification of critical data or all data accessible by Oracle Order Management. Although the issue is located within Oracle Order Management, successful exploitation may significantly impact additional products due to a scope change.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.