File Transmission Vulnerability in Oracle E-Business Suite Payments
CVE-2026-70696

7.5HIGH

Key Information:

Vendor

Oracle
Status
Oracle Payments
Vendor
CVE Published:
18 August 2026

What is CVE-2026-70696?

A vulnerability exists within the File Transmission component of Oracle Payments in the Oracle E-Business Suite. This flaw allows unauthenticated attackers with network access to exploit the system, potentially leading to unauthorized access to sensitive data. If successfully exploited, attackers may gain complete access to all data associated with Oracle Payments, compromising the confidentiality and integrity of the information stored. Supported versions from 12.2.3 to 12.2.15 are affected, underscoring the importance of implementing robust network security measures to safeguard against possible intrusions.

Affected Version(s)

Oracle Payments 12.2.3 <= 12.2.15

References

https://www.oracle.com/security-alerts/cspuaug2026.html
vendor-advisory

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.