CVE-2026-70877

A CVSS 8.8 HIGH-severity flaw in Oracle Hyperion Data Relationship Management 11.2.25.0.000 (Access and security component) allows low-privileged, network-authenticated attackers via HTTP to fully compromise the application (C/H/I/A all High). Oracle's August 2026 CPU advisory is the patch refere...

CVE-2026-70873

...

CVE-2026-70872

Oracle Hyperion Data Relationship Management (component: Access and security), version 11.2.25.0.000, is affected by an unauthenticated, network-reachable flaw (CVSS 9.1) enabling full confidentiality and integrity compromise of accessible data; no public exploit details are available. Patch guid...

CVE-2026-70872

...

CVE-2026-70865

...

CVE-2026-70859

...

CVE-2026-70839

CVE-2026-70839 affects the Oracle Financials for EMEA product (component: Internal Operations ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability without user interaction to gain unauthorized access t...

CVE-2026-70831

...

CVE-2026-70829

...

CVE-2026-70827

...

CVE-2026-70811

CVE-2026-70811 affects the Oracle Purchasing product (component: Internal Operations ) of Oracle E-Business Suite , versions 12.2.5 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability without user interaction to perform unauthorized creation, de...

CVE-2026-70809

...

CVE-2026-70807

A high-severity (CVSS 8.5) vulnerability in Oracle E-Business Suite's Call Center Technology component (Internal Operations) affects versions 12.2.3–12.2.15. A low-privileged attacker with network access via HTTP can read critical data and modify or delete some accessible data. Exploitation detai...

CVE-2026-70800

High-privileged local attacker can compromise Oracle SDP Number Portability (component: Internal Operations) in EBS 12.2.3–12.2.15, causing unauthorized data modification, partial data read, and partial DoS. CVSS 7.3 HIGH; no exploit/in-the-wild activity reported. Oracle's August 2026 CPU provide...

CVE-2026-70799

Oracle SDP Number Portability (component: Internal Operations) in Oracle E-Business Suite versions 12.2.3-12.2.15 is vulnerable to an easily exploitable flaw allowing unauthenticated remote attackers via HTTP to gain unauthorized access to all accessible data. CVSS 3.1 scores 7.5 (HIGH), with con...

CVE-2026-70794

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) contains a local integrity vulnerability; a low-privileged local attacker can modify or delete critical data. CVSS 3.1 scores 4.7 (Medium). Exploitation requires local infrastructure access; no exploit details are provided. Apply ...

CVE-2026-70795

...

CVE-2026-70793

...

CVE-2026-70792

...

CVE-2026-70778

CVE-2026-70778 affects Oracle Customer Care (Internal Operations component) in Oracle E-Business Suite versions 12.2.3-12.2.15. A low-privileged attacker with network HTTP access can trigger unauthorized creation, deletion, or modification of critical data, with scope change potentially impacting...