CVE-2026-70747

oracle customers_online: Sicherheitsluecke

Affected

oracle/customers_online between 12.2.3..12.2.15

Description

Vulnerability in the Oracle Customers Online product of Oracle E-Business Suite (component: Customer Tab). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Customers Online. Successful attacks of this vulnerability can result in takeover of Oracle Customers Online. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Source: NVD (NIST)cvelistv5 BSI WID Portal BSI CSAF

Affected products

The following versions are affected. Older releases of the same product line are also vulnerable unless stated otherwise.

oraclecustomers_online

12.2.3 – 12.2.15

Metrics

XIEM Effective CVSS

8.8

Source: nvd-v3

EPSS percentile

35.4 %

Elevated — this CVE ranks above at least 10% of all CVEs scored today.

KEV status

—

Show all metrics

Severity

high

80.00

no public PoC known

8.8

0.4 %

Low — model estimates < 1% exploitation likelihood.

Published

2026-08-18 21:01 UTC

References & sources

https://www.oracle.com/security-alerts/cspuaug2026.html
vendor-advisory

Reanalysis & status changes

Chronological NVD audit events for this CVE — reanalyses, CVSS updates, CPE diffs.

CVE Modified2026-08-25 15:16 UTC· 134c704f-9b21-4f2e-91b3-4a467353bcc0
- CWE: CWE-284
- SSVC: {"id":"CVE-2026-70747","role":"CISA Coordinator","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalI…