CVE Feed

    Dashboard / CVE / CVE-2026-70922

    CVE-2026-70922

    Vulnerability in the Oracle Financial Services Enterprise Case Management product of Oracle Financial Services Applications (component: Web UI). Supported versions that are affected are 8.0.8.2 and 8.1.2.11. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financial Services Enterprise Case Management. Successful attacks of this vulnerability can result in takeover of Oracle Financial Services Enterprise Case Management. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

    Published:Aug 18, 2026
    Last Modified:Aug 22, 2026
    EPS:Aug 18, 2026
    EPSS Score:0.00479
    CVSS Score:8.8

    Affected Products

    Vendor
    Oracle
    Product
    Financial Services Enterprise Case Management

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-287 Improper Authentication

    Related CVEs

    CVE-2022-22965 (CVSS 9.8) — A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) …
    CVE-2022-22963 (CVSS 9.8) — In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionalit…
    CVE-2022-23437 (CVSS 6.5) — There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML…
    CVE-2021-38153 (CVSS 5.9) — Some components in Apache Kafka use `Arrays.equals` to validate a password or key, which is vulnerable to timi…
    CVE-2021-2351 (CVSS 8.3) — Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that a…
    CVE-2021-35516 (CVSS 7.5) — When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that fin…
    CVE-2021-35517 (CVSS 7.5) — When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that fi…
    CVE-2021-36090 (CVSS 7.5) — When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that fi…
    CVE-2021-35515 (CVSS 7.5) — When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry c…
    CVE-2020-36518 (CVSS 7.5) — jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth o…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High