CVE-2026-70965

Oracle Hyperion Infrastructure Technology (component: Installation and Configuration , version 11.2.25.0.000 ) is affected by an easily exploitable vulnerability that allows a low-privileged attacker with network access via HTTP to achieve full takeover of the system, resulting in high impact to ...

CVE-2026-70960

Oracle Hyperion Financial Management 11.2.25.0.000 has a HIGH-severity (CVSS 7.6) Security component flaw exploitable over HTTP by a low-privileged attacker, enabling unauthorized data access and modification with scope change. Oracle's August 2026 CPU patch is the remediation. No in-the-wild exp...

CVE-2026-70959

...

CVE-2026-70957

Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) at version 11.2.25.0.000 has a HIGH-severity (CVSS 8.1) flaw: a low-privileged network attacker via HTTP can gain unauthorized read/write access to critical application data. No exploit or patch details are prov...

CVE-2026-70952

...

CVE-2026-70951

...

CVE-2026-70951

CVE-2026-70951 affects the Document Management component of Oracle Siebel CRM End User (versions 17.0–26.6 ). A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to achieve full takeover of the application, impacting co...

CVE-2026-70948

Oracle E-Business Suite Purchasing (versions 12.2.3–12.2.15) has a HIGH-severity flaw allowing a low-privileged attacker with network access to fully compromise the application; apply Oracle's August 2026 CPU patches immediately. No exploitation details are provided in the documents.

CVE-2026-70949

Affected: Oracle Siebel CRM Server Infrastructure, versions 17.0–26.6. Easily exploitable via HTTP by low-privileged network attacker, enabling full deployment takeover (CVSS 8.8 HIGH, C/I/A all HIGH). Oracle published patches in the August 2026 CPU advisory; no exploitation details are provided ...

CVE-2026-70937

A HIGH-severity flaw in Oracle Hyperion Financial Management 11.2.25.0.000 Security component allows a low-privileged, network-authenticated attacker via HTTP to achieve full product compromise (confidentiality, integrity, availability). No exploitation evidence is provided; Oracle's August 2026 ...

CVE-2026-70935

Oracle Hyperion Financial Management 11.2.25.0.000 has a Security-component flaw: a low-privileged attacker with network HTTP access can read all accessible data (HIGH confidentiality) and cause partial DoS (LOW availability), CVSS 7.1. No patch version or exploit details are provided; see Oracle...

CVE-2026-70930

A HIGH-severity vulnerability affects the Product Diagnostic Tools component of Oracle E-Business Suite Order Management, versions 12.2.3 through 12.2.15. A low-privileged attacker with network HTTP access can exploit it (high attack complexity) to achieve full compromise of Oracle Order Manageme...

CVE-2026-70931

...

CVE-2026-70925

Oracle Hyperion Financial Management (component: Security ), version 11.2.25.0.000 , is affected by an easily exploitable vulnerability that allows a low-privileged attacker with network access via SQL to compromise the product. Successful exploitation results in unauthorized creation, deletion, ...

CVE-2026-70919

Oracle Hyperion Financial Management 11.2.25.0.000 has a Security component flaw requiring local infrastructure access, high complexity, and human interaction; successful exploitation grants unauthorized update/insert/delete access to application data. No exploit details provided. Patch status no...

CVE-2026-70916

...

CVE-2026-70916

The Security component of Oracle Hyperion Financial Management version 11.2.25.0.000 is affected. An unauthenticated attacker with local infrastructure access can gain unauthorized read access to a subset of application data. CVSS 3.1 score 4.0 (Medium). Oracle's August 2026 CPU advisory is the p...

CVE-2026-70911

...

CVE-2026-70906

CVE-2026-70906 is a denial-of-service vulnerability in the 2D component of Oracle Java SE , affecting versions 25.0.4 and 26.0.2 . The underlying issue relates to font loading , as indicated by the associated OpenJDK security advisory (RLSA-2026:55798). An unauthenticated attacker with network ac...

CVE-2026-70907

...