CVE-2026-70972

...

CVE-2026-70971

Oracle Hyperion Infrastructure Technology 11.2.25.0.000 (Installation and Configuration component) has a network-reachable vulnerability allowing a low-privileged attacker to gain unauthorized access to critical data and modify some data. CVSS 7.1 (HIGH). No exploit details provided; remediation ...

CVE-2026-70965

...

CVE-2026-70960

Oracle Hyperion Financial Management 11.2.25.0.000 has a HIGH-severity (CVSS 7.6) Security component flaw exploitable over HTTP by a low-privileged attacker, enabling unauthorized data access and modification with scope change. Oracle's August 2026 CPU patch is the remediation. No in-the-wild exp...

CVE-2026-70959

...

CVE-2026-70955

...

CVE-2026-70951

...

CVE-2026-70942

Oracle's August 2026 Critical Patch Update (referenced in the CVE) addresses CVE-2026-70942 in the Security component of HFM 11.2.25.0.000, a HIGH-severity issue exploitable by low-privileged network attackers with no user interaction. No exploitation details are provided; apply Oracle's August 2...

CVE-2026-70936

...

CVE-2026-70938

...

CVE-2026-70931

...

CVE-2026-70926

...

CVE-2026-70923

...

CVE-2026-70925

Oracle Hyperion Financial Management (component: Security ), version 11.2.25.0.000 , is affected by an easily exploitable vulnerability that allows a low-privileged attacker with network access via SQL to compromise the product. Successful exploitation results in unauthorized creation, deletion, ...

CVE-2026-70916

...

CVE-2026-70911

...

CVE-2026-70910

Oracle Siebel CRM REST component (versions 17.0–26.6) is vulnerable to unauthenticated, network-accessible exploitation via HTTP, yielding unauthorized access to all Siebel CRM Integration data. CVSS 7.5 HIGH (confidentiality-only). Oracle's August 2026 CPU advisory is the primary reference. No e...

CVE-2026-70908

CVE-2026-70908 affects the Imperative Web Server component of Helidon (Oracle Fusion Middleware), specifically version 3.2.18 . An unauthenticated attacker with network access via HTTP can trigger a complete denial of service , causing a hang or frequently repeatable crash of the Helidon service....

CVE-2026-70905

...

CVE-2026-70892

Affected product: Oracle Hyperion Data Relationship Management version 11.2.25.0.000, component "Access and security." Root cause: unspecified, described as "difficult to exploit." Impact: CVSS 8.2 (High) — low-privileged network attacker can gain unauthorized read/write access to critical data w...