THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-70924 (HIGH 8.1) — Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Security). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access vi

[NVD] CVE-2026-70924 (HIGH 8.1) — Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Security). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access vi

mednvdPublished 2026-08-18

CVE-2026-70924 CVSS: 8.1 HIGH Published: 2026-08-18T21:17:50.280

Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Security). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Web Services Manager. Su

MITRE ATT&CK techniques

Web ServicesT1583.006
Web ServicesT1584.006

Indicators of compromise

CVE-2026-70924cve
12.2.1.4ipv4
14.1.2.0ipv4

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-70924