CVE-2026-70995

...

CVE-2026-70981

Oracle Commerce 11.4.0 Content Acquisition System is affected by a critical (CVSS 9.1) unauthenticated network-based vulnerability enabling unauthorized data modification and denial of service. No exploitation details are provided; refer to Oracle's August 2026 security alert for patch information.

CVE-2026-70971

...

CVE-2026-70967

...

CVE-2026-70954

Oracle Commerce Platform 11.4.0 (Dynamo Application Framework) has a critical remotely exploitable flaw: an unauthenticated attacker via HTTP can achieve full platform compromise (CVSS 9.8). Oracle's August 2026 CPU provides remediation; no in-the-wild exploitation details are provided in the doc...

CVE-2026-70952

...

CVE-2026-70951

CVE-2026-70951 affects the Document Management component of Oracle Siebel CRM End User (versions 17.0–26.6 ). A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to achieve full takeover of the application, impacting co...

CVE-2026-70916

The Security component of Oracle Hyperion Financial Management version 11.2.25.0.000 is affected. An unauthenticated attacker with local infrastructure access can gain unauthorized read access to a subset of application data. CVSS 3.1 score 4.0 (Medium). Oracle's August 2026 CPU advisory is the p...

CVE-2026-70841

...

CVE-2026-70832

CVE-2026-70832 affects the Security component of Oracle Hyperion Financial Management version 11.2.25.0.000 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data or complete access to all data accessible through the ...

CVE-2026-70795

The Valid Session component in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is vulnerable. An unauthenticated remote attacker using Oracle Net can exploit this with high attack complexity, achieving full compromise (confidentiality, integrity, availability) — CVSS 3.1 base score 8.1 (H...

CVE-2026-70727

Oracle Helidon 3.2.18's Imperative Web Server component has a network-exploitable vulnerability (CVSS 5.3) allowing unauthenticated attackers to read a subset of accessible data via HTTPS. Details are in Oracle's August 2026 CPU advisory; monitor for the patch release and upgrade to the fixed ver...

CVE-2026-70722

CVE-2026-70722 affects Oracle E-Business Suite (Advanced Inbound Telephony, Internal Operations) versions 12.2.3-12.2.15, exploitable over HTTPS by an unauthenticated attacker. CVSS 8.2 (HIGH) yields unauthorized data modification/deletion and partial DoS. Oracle's August 2026 CPU advisory (cspua...

CVE-2026-70717

CVE-2026-70717 affects Oracle Autonomous Health Framework's Cluster Health Analyzer component (versions 26.1.0, 26.2.0, 26.3.1, 26.5.0, 26.5.2). A low-privileged attacker with physical segment access can compromise the framework with scope-change impact to other products, causing unauthorized dat...

CVE-2026-70702

...

CVE-2026-70696

Oracle Payments (component: File Transmission) in Oracle E-Business Suite versions 12.2.3–12.2.15 is vulnerable to an unauthenticated, network-based TCP attack (CVSS 7.5 HIGH). Successful exploitation grants unauthorized access to critical data or full Oracle Payments dataset, impacting confident...

CVE-2026-62638

Oracle Reports Developer 14.1.2.0.0 (Security and Authentication component) has a critical CVSS 9.1 flaw: unauthenticated remote attackers via HTTP can modify/delete data and crash the service (complete DoS). No exploit details provided. Patch status is not specified in the documents. Monitor Ora...

CVE-2026-62589

...

CVE-2026-62584

...

CVE-2026-62582

Oracle Hyperion Calculation Manager 11.2.25.0.000 has a critical Security-component flaw (CVSS 9.6) exploitable via HTTP by low-privileged attackers, enabling unauthorized data access and modification with scope change to other products. No exploit code is available. Apply the Oracle August 2026 ...