CVE-2026-70891

...

CVE-2026-70887

...

CVE-2026-70880

Oracle Hyperion Data Relationship Management 11.2.25.0.000 has a critical flaw in its Access and security component. Unauthenticated attackers with network TCP access can fully compromise the application (CVSS 10.0), with potential scope change affecting additional products. Oracle's August 2026 ...

CVE-2026-70877

A CVSS 8.8 HIGH-severity flaw in Oracle Hyperion Data Relationship Management 11.2.25.0.000 (Access and security component) allows low-privileged, network-authenticated attackers via HTTP to fully compromise the application (C/H/I/A all High). Oracle's August 2026 CPU advisory is the patch refere...

CVE-2026-70874

Oracle Hyperion Data Relationship Management version 11.2.25.0.000 has an easily exploitable flaw in its Access and security component. A low-privileged attacker with network HTTP access can achieve full compromise (confidentiality, integrity, availability). Oracle's August 2026 CPU provides the ...

CVE-2026-70859

...

CVE-2026-70839

CVE-2026-70839 affects the Oracle Financials for EMEA product (component: Internal Operations ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability without user interaction to gain unauthorized access t...

CVE-2026-70831

...

CVE-2026-70828

...

CVE-2026-70820

...

CVE-2026-70821

...

CVE-2026-70807

A high-severity (CVSS 8.5) vulnerability in Oracle E-Business Suite's Call Center Technology component (Internal Operations) affects versions 12.2.3–12.2.15. A low-privileged attacker with network access via HTTP can read critical data and modify or delete some accessible data. Exploitation detai...

CVE-2026-70792

...

CVE-2026-70792

A vulnerability in the Internal Operations component of Oracle Yard Management (Oracle E-Business Suite, versions 12.2.3–12.2.15) allows a low-privileged attacker with network HTTP access to compromise the application, with successful exploitation enabling full takeover (CVSS 3.1 base score 8.8, ...

CVE-2026-70793

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) has a network-accessible vulnerability exploitable by low-privileged attackers via HTTP, enabling unauthorized data read, insert, update, and delete. CVSS 3.1 scores 4.2 (Medium). No exploitation details or patches are provided in...

CVE-2026-70778

CVE-2026-70778 affects Oracle Customer Care (Internal Operations component) in Oracle E-Business Suite versions 12.2.3-12.2.15. A low-privileged attacker with network HTTP access can trigger unauthorized creation, deletion, or modification of critical data, with scope change potentially impacting...

CVE-2026-70774

CVE-2026-70774 affects the Oracle Warehouse Management component (Internal Operations) of Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to perform unauthorized creation, deletion, or modification o...

CVE-2026-70774

...

CVE-2026-70761

CVE-2026-70761 affects the Oracle Risk Management product (component: Internal Operations) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability without user interaction to achieve full takeover of ...

CVE-2026-70763

A HIGH-severity vulnerability in Oracle E-Business Suite (component: Daily Business Intelligence), affecting versions 12.2.3–12.2.15, allows a low-privileged attacker via HTTP to compromise the application with full C/I/A impact. No specific root cause or exploit details are provided; Oracle's Au...