CVE-2026-70722: High severity Oracle Oracle Advanced Inbound Telephony (Oracle E-Business Suite - Internal Operations) vulnerability
Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Advanced Inbound Telephony. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Advanced Inbound Telephony accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Advanced Inbound Telephony. CVSS 3.1 Base Score 8.2 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Oracle Advanced Inbound Telephony (Oracle E-Business Suite) - Internal Operationsto a version that resolves this vulnerability.Fixed in 12.2.3-12.2.15
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
An unauthenticated attacker with network access to the affected product over HTTPS can exploit it. No user interaction or prior privileges are required.
Which deployments are affected?
Affected supported versions are Oracle Advanced Inbound Telephony in Oracle E-Business Suite Internal Operations versions 12.2.3 through 12.2.15. The vulnerability is network-reachable via HTTPS.
What could a successful attack allow?
An attacker could create, delete, or modify critical data or all data accessible to Oracle Advanced Inbound Telephony. They could also cause a partial denial of service.