200551 matches found
CVE-2026-70798
CVE-2026-70798 affects Oracle E-Business Suite Purchasing (Internal Operations component), versions 12.2.3–12.2.15. A low-privileged local attacker can easily exploit it to take over Oracle Purchasing, with full confidentiality, integrity, and availability impact (CVSS 7.8 HIGH). No exploit detai...
CVE-2026-70794
Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) contains a local integrity vulnerability; a low-privileged local attacker can modify or delete critical data. CVSS 3.1 scores 4.7 (Medium). Exploitation requires local infrastructure access; no exploit details are provided. Apply ...
CVE-2026-70795
...
CVE-2026-70785
...
CVE-2026-70767
Oracle Hyperion Financial Reporting Server version 11.2.25.0.000 has an easily exploitable flaw allowing a low-privileged network attacker via HTTP to gain unauthorized access to critical or all product data (CVSS 6.5, confidentiality-only impact). No root cause or in-the-wild exploitation detail...
CVE-2026-70765
Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) is vulnerable to an unauthenticated, low-complexity HTTP attack requiring human interaction. CVSS 3.1 scores it 6.1 (Medium) with scope change, enabling unauthorized read and update/insert/delete access to some product data. Explo...
CVE-2026-70765
...
CVE-2026-70759
Oracle Hyperion Financial Reporting Server (affected version 11.2.25.0.000) has a medium-severity (CVSS 5.4) flaw exploitable via unauthenticated HTTP access, requiring user interaction, enabling unauthorized read, update, insert, and delete access to accessible data. Oracle's August 2026 securit...
CVE-2026-70753
A low-privileged, network-accessible attacker can exploit a flaw in the Server component of Oracle Hyperion Financial Reporting 11.2.25.0.000 via HTTP, requiring only user interaction, to read all accessible data and perform limited unauthorized updates. Oracle's August 2026 security advisory is ...
CVE-2026-70751
...
CVE-2026-70744
Oracle Hyperion Financial Reporting 11.2.25.0.000 Server component has a HIGH severity (CVSS 8.1) unauthenticated remote vulnerability exploitable via HTTP, potentially leading to full product compromise; no exploit or in-the-wild activity details are provided in the documents.
CVE-2026-70738
...
CVE-2026-70712
CVE-2026-70712 affects the Install component of Oracle Agile Engineering Data Management (Oracle Supply Chain), version 6.2.1 . The vulnerability allows a high-privileged local attacker to achieve full compromise of the product, resulting in complete loss of confidentiality, integrity, and availa...
CVE-2026-70713
...
CVE-2026-70703
Oracle Agile Engineering Data Management (Supply Chain, Engineering Communication Interface) version 6.2.1 is affected by a HIGH-severity (CVSS 8.2) network-based flaw allowing low-privileged attackers to gain unauthorized read/write access to critical data; no exploitation or patch details are p...
CVE-2026-70698
...
CVE-2026-70695
CVE-2026-70695 affects the File Transmission component of Oracle Payments within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A high-privileged attacker with network access via HTTP can exploit this vulnerability to perform unauthorized creation, deletion, or modification of critic...
CVE-2026-70696
...