CVE-2026-70681highCWE-284

CVE-2026-70681: high-severity vulnerability in Oracle Applications DBA

Published · Updated

Follow this CVE+ Monitor Applications DBA

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 0.3%
Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: JRI and other Java utils). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications DBA. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Applications DBA. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Oracle Corporation · Oracle Applications DBA
Related CVEs — Oracle Applications DBA

In the same product, most dangerous first.

CVE-2026-61107HIGHCVE-2026-61107EPSS 0.5%CVE-2026-61110HIGHCVE-2026-61110EPSS 0.4%CVE-2026-70680HIGHCVE-2026-70680EPSS 0.4%CVE-2026-21960MEDIUMCVE-2026-21960EPSS 0.4%CVE-2026-22011HIGHCVE-2026-22011EPSS 0.3%CVE-2026-60761MEDIUMCVE-2026-60761EPSS 0.2%