CVE-2026-70777

Oracle iSupplier Portal (component Internal Operations) in E-Business Suite 12.2.3–12.2.15 has an easily exploitable, unauthenticated network vulnerability (CVSS 7.5) allowing full disclosure of all accessible data. Oracle's August 2026 CPU advisory (https://www.oracle.com/security-alerts/cspuaug...

CVE-2026-70774

CVE-2026-70774 affects the Oracle Warehouse Management component (Internal Operations) of Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to perform unauthorized creation, deletion, or modification o...

CVE-2026-70770

...

CVE-2026-70765

...

CVE-2026-70761

CVE-2026-70761 affects the Oracle Risk Management product (component: Internal Operations) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability without user interaction to achieve full takeover of ...

CVE-2026-70763

A HIGH-severity vulnerability in Oracle E-Business Suite (component: Daily Business Intelligence), affecting versions 12.2.3–12.2.15, allows a low-privileged attacker via HTTP to compromise the application with full C/I/A impact. No specific root cause or exploit details are provided; Oracle's Au...

CVE-2026-70734

Oracle Autonomous Health Framework's Trace File Analyzer component (versions 26.1.0, 26.2.0, 26.3.1, 26.5.0, 26.5.2) is affected by a HIGH-severity (CVSS 7.4) local vulnerability requiring high privileges and user interaction. Successful exploitation permits unauthorized data modification/deletio...

CVE-2026-70734

...

CVE-2026-70731

...

CVE-2026-70708

...

CVE-2026-70704

Oracle E-Business Suite 12.2.3–12.2.15 Party Search UI has a HIGH-severity (CVSS 8.1) flaw exploitable over HTTP by unauthenticated attackers, enabling full compromise of the Trading Community component. No exploitation evidence is provided. Patch details: Oracle CSP August 2026 advisory. Monitor...

CVE-2026-70700

CVE-2026-70700 affects the Oracle Payables product of Oracle E-Business Suite (component: Internal Operations ), versions 12.2.3 through 12.2.15 . An unauthenticated attacker with network access via HTTP can trigger a hang or frequently repeatable crash, resulting in a complete denial of service ...

CVE-2026-70701

...

CVE-2026-70688

...

CVE-2026-70690

...

CVE-2026-70685

Affected component: Oracle Hyperion Calculation Manager Security component, version 11.2.25.0.000. Root cause: unauthenticated attacker with local infrastructure access can compromise the application. Impact: high confidentiality breach and low integrity impact, with scope change affecting additi...

CVE-2026-70678

...

CVE-2026-70679

...

CVE-2026-70674

CVE-2026-70674 affects Oracle Reports Developer 14.1.2.0.0 (component: Security and Authentication). An unauthenticated attacker with access to the physical communication segment can fully compromise the product (CVSS 8.8 HIGH). No exploit details are provided; refer to Oracle's August 2026 CPU a...

CVE-2026-62636

Oracle Reports Developer 14.1.2.0.0 (Security and Authentication component) is vulnerable to an unauthenticated, remotely exploitable SOAP attack (CVSS 8.6) yielding unauthorized data access, modification, and partial DoS. Oracle's August 2026 Critical Patch Update addresses it; apply patches per...