3340 matches found
CVE-2026-70939
Oracle Hyperion Financial Management version 11.2.25.0.000's Security component is affected; a high-privileged network attacker can exploit it via HTTP to fully compromise the application (CVSS 7.2 HIGH). Patch details are in Oracle's August 2026 CPU advisory; no exploitation evidence is provided...
CVE-2026-70916
The Security component of Oracle Hyperion Financial Management version 11.2.25.0.000 is affected. An unauthenticated attacker with local infrastructure access can gain unauthorized read access to a subset of application data. CVSS 3.1 score 4.0 (Medium). Oracle's August 2026 CPU advisory is the p...
CVE-2026-70916
...
CVE-2026-70809
...
CVE-2026-70722
CVE-2026-70722 affects Oracle E-Business Suite (Advanced Inbound Telephony, Internal Operations) versions 12.2.3-12.2.15, exploitable over HTTPS by an unauthenticated attacker. CVSS 8.2 (HIGH) yields unauthorized data modification/deletion and partial DoS. Oracle's August 2026 CPU advisory (cspua...
CVE-2026-70708
...
CVE-2026-70702
...
CVE-2026-70696
Oracle Payments (component: File Transmission) in Oracle E-Business Suite versions 12.2.3–12.2.15 is vulnerable to an unauthenticated, network-based TCP attack (CVSS 7.5 HIGH). Successful exploitation grants unauthorized access to critical data or full Oracle Payments dataset, impacting confident...
CVE-2026-70685
Affected component: Oracle Hyperion Calculation Manager Security component, version 11.2.25.0.000. Root cause: unauthenticated attacker with local infrastructure access can compromise the application. Impact: high confidentiality breach and low integrity impact, with scope change affecting additi...
CVE-2026-70678
...
CVE-2026-70678
Oracle Hyperion Calculation Manager version 11.2.25.0.000 (Security component) is affected by a vulnerability allowing a low-privileged attacker with network access via HTTP to compromise the product. Successful exploitation requires user interaction from a person other than the attacker. Due to ...
CVE-2026-62589
...
CVE-2026-62584
...
CVE-2026-62500
The Common Events component of Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 is vulnerable to a network-accessible flaw exploitable by a low-privileged attacker via HTTP, enabling full system takeover with CVSS 3.1 score 8.8 (HIGH). Oracle's August 2026 CPU advisory addresses th...
CVE-2026-61308
...
CVE-2026-61290
...
CVE-2026-61248
...
CVE-2026-60991
Oracle Identity Manager Connector (Core component, versions 12.2.1.4.0 and 14.1.2.1.0) has an easily exploitable local vulnerability allowing low-privileged attackers to fully compromise the product; Oracle's August 2026 CPU addresses it — apply patches from https://www.oracle.com/security-alerts...