CVE-2026-71040

...

CVE-2026-71008

Oracle Commerce Experience Manager component in version 11.4.0 is affected by a network-reachable vulnerability exploitable by a high-privileged HTTP attacker, enabling unauthorized access to critical or all accessible data (CVSS 6.8, confidentiality impact). Exploitation details are not provided...

CVE-2026-70985

...

CVE-2026-70981

Oracle Commerce 11.4.0 Content Acquisition System is affected by a critical (CVSS 9.1) unauthenticated network-based vulnerability enabling unauthorized data modification and denial of service. No exploitation details are provided; refer to Oracle's August 2026 security alert for patch information.

CVE-2026-70955

...

CVE-2026-70952

...

CVE-2026-70943

The Oracle Hyperion Financial Management Security component, version 11.2.25.0.000, is vulnerable to an unauthenticated, easily exploitable flaw requiring adjacent network access. Successful exploitation grants full confidentiality and integrity compromise of all accessible HFM data. CVSS 3.1 sco...

CVE-2026-70939

Oracle Hyperion Financial Management version 11.2.25.0.000's Security component is affected; a high-privileged network attacker can exploit it via HTTP to fully compromise the application (CVSS 7.2 HIGH). Patch details are in Oracle's August 2026 CPU advisory; no exploitation evidence is provided...

CVE-2026-70933

Oracle Hyperion Financial Management 11.2.25.0.000 Security component is vulnerable; a low-privileged network attacker can access all accessible data and cause partial DoS via HTTP. CVSS 7.1 (HIGH). No exploit or in-the-wild exploitation details provided. Patch status not specified in documents.

CVE-2026-70927

...

CVE-2026-70929

Oracle Hyperion Financial Management 11.2.25.0.000 has a HIGH-severity (CVSS 8.1) Security component flaw: a low-privileged attacker with network HTTP access can gain unauthorized read/write access to all application data. No patch details or exploitation evidence are provided. Apply Oracle's Aug...

CVE-2026-70923

...

CVE-2026-70924

Oracle Web Services Manager's Web Services Security component in versions 12.2.1.4.0 and 14.1.2.0.0 allows an unauthenticated, network-based attacker (via HTTPS) to fully compromise the product. CVSS 3.1 scores this HIGH (8.1) for confidentiality, integrity, and availability. Oracle has released ...

CVE-2026-70916

...

CVE-2026-70857

...

CVE-2026-70842

Oracle Hyperion Financial Management v11.2.25.0.000 (Security component) is affected by an easily exploitable local vulnerability (CVSS 8.4 HIGH). A low-privileged attacker with infrastructure access can compromise the product, achieving unauthorized read/write access to all accessible data, with...

CVE-2026-70822

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial...

CVE-2026-70812

A HIGH-severity vulnerability (CVSS 8.8) affects Oracle Call Center Technology within Oracle E-Business Suite, component "Internal Operations," in versions 12.2.3 through 12.2.15. An unauthenticated-to-low-privileged attacker with HTTP network access can exploit it to fully compromise the product...

CVE-2026-70798

CVE-2026-70798 affects Oracle E-Business Suite Purchasing (Internal Operations component), versions 12.2.3–12.2.15. A low-privileged local attacker can easily exploit it to take over Oracle Purchasing, with full confidentiality, integrity, and availability impact (CVSS 7.8 HIGH). No exploit detai...

CVE-2026-70794

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) contains a local integrity vulnerability; a low-privileged local attacker can modify or delete critical data. CVSS 3.1 scores 4.7 (Medium). Exploitation requires local infrastructure access; no exploit details are provided. Apply ...