1152 matches found
CVE-2026-71030
...
CVE-2026-71013
Oracle Hyperion Financial Management 11.2.25.0.000 has a Security component vulnerability exploitable locally by a high-privileged attacker, enabling unauthorized data creation, deletion, modification, and full data access (CVSS 6.0). No exploitation details are provided; see Oracle's August 2026...
CVE-2026-71011
...
CVE-2026-71005
...
CVE-2026-70981
Oracle Commerce 11.4.0 Content Acquisition System is affected by a critical (CVSS 9.1) unauthenticated network-based vulnerability enabling unauthorized data modification and denial of service. No exploitation details are provided; refer to Oracle's August 2026 security alert for patch information.
CVE-2026-70971
Oracle Hyperion Infrastructure Technology 11.2.25.0.000 (Installation and Configuration component) has a network-reachable vulnerability allowing a low-privileged attacker to gain unauthorized access to critical data and modify some data. CVSS 7.1 (HIGH). No exploit details provided; remediation ...
CVE-2026-70963
Oracle Hyperion Infrastructure Technology (version 11.2.25.0.000, Installation and Configuration component) is vulnerable to a network-accessible attack requiring low privileges. A successful exploit yields unauthorized read and write access to a subset of data. CVSS 4.2 (Medium) reflects high at...
CVE-2026-70954
Oracle Commerce Platform 11.4.0 (Dynamo Application Framework) has a critical remotely exploitable flaw: an unauthenticated attacker via HTTP can achieve full platform compromise (CVSS 9.8). Oracle's August 2026 CPU provides remediation; no in-the-wild exploitation details are provided in the doc...
CVE-2026-70936
...
CVE-2026-70938
...
CVE-2026-70914
Oracle Hyperion Financial Management version 11.2.25.0.000 has a HIGH-severity (CVSS 7.0) vulnerability in its Security component. An unauthenticated attacker with infrastructure access can compromise the application, requiring human interaction, leading to full confidentiality, integrity, and av...
CVE-2026-70872
...
CVE-2026-70857
...
CVE-2026-70806
Oracle E-Business Tax (Internal Operations component) in EBS 12.2.3–12.2.15 has a local, low-complexity flaw exploitable by a low-privilege attacker with infrastructure access, enabling unauthorized data modification and DoS. CVSS 7.1 HIGH. Oracle patch details are in the August 2026 CPU advisory...
CVE-2026-70795
The Valid Session component in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is vulnerable. An unauthenticated remote attacker using Oracle Net can exploit this with high attack complexity, achieving full compromise (confidentiality, integrity, availability) — CVSS 3.1 base score 8.1 (H...
CVE-2026-70774
...
CVE-2026-70752
...
CVE-2026-70702
...
CVE-2026-62638
Oracle Reports Developer 14.1.2.0.0 (Security and Authentication component) has a critical CVSS 9.1 flaw: unauthenticated remote attackers via HTTP can modify/delete data and crash the service (complete DoS). No exploit details provided. Patch status is not specified in the documents. Monitor Ora...