CVE-2026-62570

...

CVE-2026-62554

...

CVE-2026-62540

...

CVE-2026-62539

A critical unauthenticated remote vulnerability (CVSS 9.8) exists in Oracle Hyperion Infrastructure Technology's Installation and Configuration component (version 11.2.25.0.000). An attacker with HTTP network access can fully compromise the application, impacting confidentiality, integrity, and a...

CVE-2026-62537

...

CVE-2026-62531

Oracle Hyperion Infrastructure Technology component Lifecycle Management (version 11.2.25.0.000) is affected by a HIGH-severity (CVSS 8.1) vulnerability exploitable by an unauthenticated attacker over HTTP, potentially resulting in full system takeover. No exploitation details are provided in the...

CVE-2026-62523

...

CVE-2026-62520

...

CVE-2026-62512

...

CVE-2026-62492

Oracle Hyperion Infrastructure Technology (component: Common Security), affected version 11.2.25.0.000, contains a HIGH-severity vulnerability (CVSS 7.4) exploitable via HTTPS by an unauthenticated network attacker. Successful exploitation can result in unauthorized creation, deletion, or modific...

CVE-2026-62462

Oracle E-Business Suite Work in Process (component: Internal Operations) versions 12.2.3-12.2.15 is vulnerable. A low-privileged attacker with network access via HTTP can exploit it for full CIA impact (CVSS 8.8 HIGH). Oracle's August 2026 CPU advisory is referenced for patch details; no exploit ...

CVE-2026-61319

...

CVE-2026-61308

A medium-severity (CVSS 6.8) vulnerability in the Networking component of Oracle Java SE (8u501 through 26.0.2), GraalVM for JDK (17.0.20, 21.0.12), and GraalVM Enterprise Edition (21.3.19) allows unauthenticated remote attackers via HTTP to access critical data with high confidentiality impact; ...

CVE-2026-61290

A HIGH-severity (CVSS 7.1) vulnerability in Oracle WebCenter Content's Content Server component affects versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network HTTP access can exploit it (requiring human interaction and high complexity) to compromise all three security pillars ...

CVE-2026-61288

...

CVE-2026-61284

A HIGH-severity (CVSS 8.8) flaw in Oracle Enterprise Manager's Application Config Console affects versions 13.5 and 24.1; an HTTP-accessible, low-privilege attacker can fully compromise the platform (C/I/A impacts). Exploitation details and fix version are not provided in the documents; apply Ora...

CVE-2026-61273

...

CVE-2026-61259

...

CVE-2026-61229

Oracle WebCenter Portal (Fusion Middleware) Runtime Tools component, versions 12.2.1.4.0 and 14.1.2.0.0, is vulnerable to a HIGH-severity (CVSS 8.1) unauthenticated remote HTTP attack requiring high complexity; successful exploitation can fully compromise the application. No specific root cause o...

CVE-2026-61227

CVE-2026-61227 affects the Runtime Tools component of Oracle WebCenter Portal (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though user interaction is required . Due to a scope change , succe...