23521 matches found
CVE-2026-70826
Oracle Hyperion Financial Management 11.2.25.0.000 has an easily exploitable security component flaw. A low-privileged attacker with network HTTP access can obtain unauthorized access to critical data. CVSS 3.1 score is 6.5 (MEDIUM), with high confidentiality impact. No exploits are currently kno...
CVE-2026-70824
...
CVE-2026-70820
...
CVE-2026-70800
High-privileged local attacker can compromise Oracle SDP Number Portability (component: Internal Operations) in EBS 12.2.3–12.2.15, causing unauthorized data modification, partial data read, and partial DoS. CVSS 7.3 HIGH; no exploit/in-the-wild activity reported. Oracle's August 2026 CPU provide...
CVE-2026-70799
...
CVE-2026-70796
...
CVE-2026-70795
The Valid Session component in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is vulnerable. An unauthenticated remote attacker using Oracle Net can exploit this with high attack complexity, achieving full compromise (confidentiality, integrity, availability) — CVSS 3.1 base score 8.1 (H...
CVE-2026-70793
...
CVE-2026-70786
...
CVE-2026-70787
Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) has an easily exploitable HTTP-based flaw allowing low-privilege network attackers to fully compromise the server (CVSS 8.8 HIGH, all CIA impacts). No in-the-wild exploitation is reported. Oracle's August 2026 security alert (http...
CVE-2026-70768
Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) has a medium-severity (CVSS 6.1) HTTP-based vulnerability exploitable by unauthenticated attackers, enabling unauthorized read/write access to data with scope change; no exploitation details are provided. Oracle's August 2026 CPU ...
CVE-2026-70770
...
CVE-2026-70765
...
CVE-2026-70754
...
CVE-2026-70752
...
CVE-2026-70754
Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) is affected by an easily exploitable, unauthenticated HTTP-based vulnerability allowing unauthorized read access to a subset of accessible data; CVSS 3.1 Base Score 5.3 (MEDIUM). Oracle's August 2026 Critical Patch Update addresse...
CVE-2026-70749
Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) has a HIGH-severity (CVSS 8.1) unauthenticated remote vulnerability exploitable via HTTP. A network-accessible attacker can compromise the product, with full confidentiality, integrity, and availability impact. No specific root ca...
CVE-2026-70734
...
CVE-2026-70726
CVE-2026-70726 affects the Internal Operations component of Oracle Cash Management in E-Business Suite versions 12.2.3 through 12.2.15. A high-privileged local attacker can modify or access all Cash Management data (CVSS 6.0, Medium). Oracle released patches in its August 2026 Critical Patch Upda...