CVE-2026-71101

CVE-2026-71101 affects the US Payroll Tax Issues component of Oracle HRMS (US) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with local logon to the infrastructure where the product executes can exploit this vulnerability to achieve full takeover of ...

CVE-2026-71091

Oracle Hyperion Financial Management 11.2.25.0.000 has an easily exploitable SQL-based vulnerability in the Security component, allowing a high-privileged remote attacker to achieve unauthorized read and write access to critical data (CVSS 6.5, Medium). No patch version or remediation is specifie...

CVE-2026-71079

...

CVE-2026-71076

...

CVE-2026-71074

...

CVE-2026-71069

...

CVE-2026-71065

CVE-2026-71065 is a critical vulnerability (CVSS 3.1: 9.3) in Oracle Helidon (component: Imperative Web Server), affecting version 3.2.18 . An unauthenticated attacker with network access via HTTP can exploit it to gain unauthorized access to critical data and perform unauthorized update, insert,...

CVE-2026-71063

...

CVE-2026-71064

...

CVE-2026-71060

...

CVE-2026-71057

A HIGH-severity (CVSS 8.5) HTTP-accessible vulnerability in Oracle BI Publisher's BI Platform Security component affects versions 8.2.0.0.0, 12.2.1.4.0, and 26.1.0.0.0, allowing a low-privileged attacker to access critical data and cause partial denial of service. Oracle's August 2026 security ad...

CVE-2026-71048

...

CVE-2026-71044

...

CVE-2026-71043

...

CVE-2026-71038

...

CVE-2026-71033

...

CVE-2026-71031

...

CVE-2026-71031

Oracle Commerce 11.4.0's Endeca Application Controller component is vulnerable via HTTP to an unauthenticated, easily exploitable attack requiring user interaction (CVSS 6.1). Successful attacks enable unauthorized read, update, insert, and delete access to affected data with scope change to addi...

CVE-2026-71032

...

CVE-2026-71029

Oracle Helidon 3.2.18 Imperative Web Server component is affected by a CVSS 6.8 medium-severity vulnerability allowing unauthenticated remote attackers to compromise Helidon and access critical data, with potential scope change impacting additional products. No patch or exploit details are provid...