55063 matches found
CVE-2026-71069
...
CVE-2026-71065
CVE-2026-71065 is a critical vulnerability (CVSS 3.1: 9.3) in Oracle Helidon (component: Imperative Web Server), affecting version 3.2.18 . An unauthenticated attacker with network access via HTTP can exploit it to gain unauthorized access to critical data and perform unauthorized update, insert,...
CVE-2026-71063
...
CVE-2026-71057
A HIGH-severity (CVSS 8.5) HTTP-accessible vulnerability in Oracle BI Publisher's BI Platform Security component affects versions 8.2.0.0.0, 12.2.1.4.0, and 26.1.0.0.0, allowing a low-privileged attacker to access critical data and cause partial denial of service. Oracle's August 2026 security ad...
CVE-2026-71041
A HIGH-severity local privilege escalation affects Oracle Agile PLM 9.3.6's Gantt Chart component. A low-privileged attacker with local infrastructure access can compromise the product with full C/I/A impact. Oracle's August 2026 CPU advisory (cspuaug2026.html) is the reference; no patch version ...
CVE-2026-71040
Oracle Agile PLM 9.3.6's Security component allows an unauthenticated, network-accessible attacker to fully compromise the application (C/I/A impact), yielding complete takeover. CVSS 9.8 Critical. No exploit details provided. Oracle's August 2026 CPU advisory is referenced for patch information.
CVE-2026-71036
...
CVE-2026-71034
Oracle Commerce 11.4.0 (component: Forge) is vulnerable to an unauthenticated SOAP-based attack via network access. Successful exploitation enables an attacker to gain unauthorized access to critical data or complete access to all accessible Oracle Commerce data, with confidentiality impact rated...
CVE-2026-71031
Oracle Commerce 11.4.0's Endeca Application Controller component is vulnerable via HTTP to an unauthenticated, easily exploitable attack requiring user interaction (CVSS 6.1). Successful attacks enable unauthorized read, update, insert, and delete access to affected data with scope change to addi...
CVE-2026-71029
Oracle Helidon 3.2.18 Imperative Web Server component is affected by a CVSS 6.8 medium-severity vulnerability allowing unauthenticated remote attackers to compromise Helidon and access critical data, with potential scope change impacting additional products. No patch or exploit details are provid...
CVE-2026-71024
...
CVE-2026-71018
...
CVE-2026-71017
Oracle Commerce 11.4.0's Endeca Application Controller is vulnerable to an unauthenticated, network-accessible HTTP attack (CVSS 6.5, HIGH complexity). Successful exploitation yields unauthorized access to critical data and partial denial of service. No exploit details are provided; Oracle's Augu...
CVE-2026-71015
Oracle Commerce 11.4.0 (Endeca Application Controller) has a critical CVSS 9.1 flaw exploitable by unauthenticated attackers over HTTP, enabling unauthorized data creation, deletion, modification, and full data access; no exploit details are provided, and the Oracle CSP advisory (cspuaug2026.html...
CVE-2026-71013
Oracle Hyperion Financial Management 11.2.25.0.000 has a Security component vulnerability exploitable locally by a high-privileged attacker, enabling unauthorized data creation, deletion, modification, and full data access (CVSS 6.0). No exploitation details are provided; see Oracle's August 2026...
CVE-2026-71011
...
CVE-2026-71005
...
CVE-2026-70990
...