CVE-2026-70902

Oracle Hyperion Data Relationship Management v11.2.25.0.000 has a HIGH-severity flaw (CVSS 7.1) in its Access and security component. A low-privileged local attacker can gain unauthorized creation, deletion, and modification access to all accessible data, with high confidentiality and integrity i...

CVE-2026-70895

...

CVE-2026-70895

Affected product: Oracle Hyperion Data Relationship Management, version 11.2.25.0.000, specifically the "Access and security" component. Root cause: Easily exploitable flaw allowing a low-privileged attacker with local infrastructure access to escalate privileges and access DRM data. Impact: Unau...

CVE-2026-70892

Affected product: Oracle Hyperion Data Relationship Management version 11.2.25.0.000, component "Access and security." Root cause: unspecified, described as "difficult to exploit." Impact: CVSS 8.2 (High) — low-privileged network attacker can gain unauthorized read/write access to critical data w...

CVE-2026-70893

Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000 is vulnerable to a SQL-based attack exploitable by a low-privileged network attacker. CVSS 3.1 score is 8.2 (HIGH). Oracle's August 2026 CPU advisory provides patch details. Exploitation details ar...

CVE-2026-70890

Oracle Hyperion DRM 11.2.25.0.000 has an unauthenticated, easily exploitable HTTP access-and-security flaw (CVSS 7.5) allowing full confidentiality compromise; Oracle's August 2026 CPU advisory is referenced, but no patch or exploit details are provided in the documents.

CVE-2026-70879

Oracle Hyperion Data Relationship Management 11.2.25.0.000 is affected by a high-severity (CVSS 7.8) local vulnerability in its Access and security component. A low-privileged attacker with host logon can achieve full takeover with scope change, impacting additional products. No specific root cau...

CVE-2026-70874

Oracle Hyperion Data Relationship Management version 11.2.25.0.000 has an easily exploitable flaw in its Access and security component. A low-privileged attacker with network HTTP access can achieve full compromise (confidentiality, integrity, availability). Oracle's August 2026 CPU provides the ...

CVE-2026-70872

Oracle Hyperion Data Relationship Management (component: Access and security), version 11.2.25.0.000, is affected by an unauthenticated, network-reachable flaw (CVSS 9.1) enabling full confidentiality and integrity compromise of accessible data; no public exploit details are available. Patch guid...

CVE-2026-70865

A network-accessible vulnerability in Oracle Application Testing Suite 13.3.0.1 allows a low-privileged attacker (with "Load Testing for Web Apps" privilege) over HTTPS to achieve full system takeover, with HIGH impacts across confidentiality, integrity, and availability (CVSS 7.5). Oracle has re...

CVE-2026-70859

...

CVE-2026-70857

CVE-2026-70857 affects Oracle Siebel CRM Open UI (versions 17.0–26.6), exploitable by a low-privileged, network-accessible attacker requiring human interaction; successful attacks grant unauthorized access, creation, deletion, or modification of critical Siebel CRM data. Oracle's August 2026 CPU ...

CVE-2026-70849

...

CVE-2026-70841

The Oracle Security Alert (CSPAug2026) referenced in the documents is not publicly accessible, so no patch version or remediation guidance can be confirmed. Affected version 11.2.25.0.000 has CVSS 5.6; no exploit code is provided. Monitor Oracle advisory for patch details.

CVE-2026-70839

CVE-2026-70839 affects the Oracle Financials for EMEA product (component: Internal Operations ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability without user interaction to gain unauthorized access t...

CVE-2026-70831

Oracle HFM 11.2.25.0.000 has an easily exploitable HTTP-based security flaw. A low-privileged, network-attached attacker can gain unauthorized access to critical or all accessible HFM data (CVSS 6.5, Confidentiality: HIGH). Oracle's August 2026 CPU advisory (https://www.oracle.com/security-alerts...

CVE-2026-70828

...

CVE-2026-70827

CVE-2026-70827 affects the Oracle MES for Process Manufacturing product (component: Internal Operations ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data...

CVE-2026-70826

Oracle Hyperion Financial Management 11.2.25.0.000 has an easily exploitable security component flaw. A low-privileged attacker with network HTTP access can obtain unauthorized access to critical data. CVSS 3.1 score is 6.5 (MEDIUM), with high confidentiality impact. No exploits are currently kno...

CVE-2026-70824

...