CVE-2026-70775 in Installed Base
Summary
by MITRE • 08/19/2026
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Installed Base accessible data as well as unauthorized read access to a subset of Oracle Installed Base accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Installed Base. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Analysis
by VulDB Data Team • 08/19/2026
The vulnerability identified in Oracle Installed Base within the Oracle E-Business Suite environment represents a significant security risk for organizations relying on this enterprise resource planning component. Specifically affecting versions 12.2.3 through 12.2.15, this flaw resides within the User Interface layer of the application. The nature of the vulnerability allows an attacker with low privileges and network access via HTTP to compromise the integrity and availability of the system. This classification indicates that while the attacker does not require administrative rights or complex user interaction such as clicking a malicious link, they must have valid but limited credentials within the Oracle E-Business Suite environment to initiate the attack vector over standard web protocols.
From a technical perspective, this vulnerability is primarily categorized under CWE-269 Improper Privilege Management and potentially CWE-89 SQL Injection if the unauthorized data modifications are achieved through malicious input manipulation in database queries. The core issue stems from insufficient validation or authorization checks within the user interface components that handle requests for updating, inserting, deleting, or reading sensitive business data. Because the vulnerability is exploitable via HTTP without requiring user interaction, it suggests a lack of proper access control enforcement at the application logic level rather than just network-level restrictions. This allows low-privileged users to escalate their effective privileges by performing actions reserved for higher-tier roles, such as modifying inventory records or customer information stored within the Installed Base module.
The operational impact of this vulnerability is substantial due to its multi-faceted nature affecting confidentiality, integrity, and availability. The unauthorized read access enables attackers to exfiltrate sensitive business intelligence, including asset locations, maintenance histories, and supplier details, which aligns with ATT&CK technique T1005 Data from Local System. Simultaneously, the ability to perform unauthorized updates, inserts, or deletes compromises data integrity, allowing for potential financial fraud, operational disruption, or sabotage of supply chain logistics, corresponding to ATT&CK techniques such as T1489 Service Stop and T1565 Data Manipulation. Furthermore, the partial denial of service capability means that attackers can degrade system performance or render specific functionalities unavailable, impacting business continuity and potentially causing significant downtime for critical operations dependent on accurate asset tracking and management data.
Mitigation strategies must focus on immediate patching and enhanced access controls. Organizations should apply the latest security patches provided by Oracle to update their E-Business Suite installations beyond version 12.2.15 or ensure that specific interim fixes are applied if upgrading is not immediately feasible. In addition to patching, it is critical to enforce strict role-based access control policies within the application, ensuring that users with low privileges do not have unnecessary permissions for data modification functions. Network segmentation should also be reviewed to limit HTTP access to only authorized IP ranges and implement web application firewalls capable of detecting and blocking anomalous request patterns associated with privilege escalation or injection attacks. Regular auditing of user activities and monitoring for unusual data changes can help in early detection of exploitation attempts, thereby reducing the window of exposure and potential damage from this vulnerability.