CVE-2026-70696

...

CVE-2026-70688

...

CVE-2026-70687

...

CVE-2026-70678

Oracle Hyperion Calculation Manager version 11.2.25.0.000 (Security component) is affected by a vulnerability allowing a low-privileged attacker with network access via HTTP to compromise the product. Successful exploitation requires user interaction from a person other than the attacker. Due to ...

CVE-2026-70673

...

CVE-2026-62636

...

CVE-2026-62611

...

CVE-2026-62601

Oracle Sales in E-Business Suite versions 12.2.3-12.2.15 is vulnerable in the Internal Operations component; a low-privileged attacker with network HTTP access can read all Sales data and modify some, at CVSS 7.1 (HIGH). Oracle's August 2026 CPU advisory provides patches; no exploit code is prese...

CVE-2026-62566

CVE-2026-62566 affects Oracle Hyperion Infrastructure Technology version 11.2.25.0.000, in the Installation and Configuration component. An unauthenticated, network-accessible attacker can exploit it via HTTP to gain unauthorized read access to a subset of data, scoring CVSS 5.3 (Medium). Oracle'...

CVE-2026-62569

Oracle Hyperion Infrastructure Technology version 11.2.25.0.000, component Installation and Configuration, is affected by a locally exploitable vulnerability requiring high privileges, enabling unauthorized data modification and partial denial of service. CVSS 3.1 score is 3.4 (Low). Oracle's Aug...

CVE-2026-62570

Oracle Hyperion Infrastructure Technology 11.2.25.0.000 has a local, low-severity (CVSS 3.0) flaw in its Installation and Configuration component; a high-privileged attacker with system access can achieve limited data modification and partial denial of service. No exploitation details are provide...

CVE-2026-62570

...

CVE-2026-62538

Oracle's August 2026 Critical Patch Update fixes a HIGH (CVSS 7.4) vulnerability in the Installation and Configuration component of Hyperion Infrastructure Technology 11.2.25.0.000, allowing an unauthenticated network attacker to compromise confidentiality and integrity of all accessible data; or...

CVE-2026-62520

...

CVE-2026-62458

Oracle E-Business Suite (component: Internal Operations of Work in Process) versions 12.2.3–12.2.15 are affected by a HIGH-severity (CVSS 7.1) vulnerability exploitable over HTTP by a low-privileged attacker, enabling denial-of-service (hang/crash) and unauthorized data modification. No in-the-wi...

CVE-2026-62442

...

CVE-2026-61332

...

CVE-2026-61326

...

CVE-2026-61319

...

CVE-2026-61295

CVE-2026-61295 affects Oracle WebCenter Content Content Server in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated local attacker can exploit it to gain unauthorized access to critical or all accessible data. CVSS 3.1 base score is 7.1 (HIGH). No exploitation detail...