9843 matches found
CVE-2026-70908
Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 3.2.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...
CVE-2026-70892
Affected product: Oracle Hyperion Data Relationship Management version 11.2.25.0.000, component "Access and security." Root cause: unspecified, described as "difficult to exploit." Impact: CVSS 8.2 (High) — low-privileged network attacker can gain unauthorized read/write access to critical data w...
CVE-2026-70890
Oracle Hyperion DRM 11.2.25.0.000 has an unauthenticated, easily exploitable HTTP access-and-security flaw (CVSS 7.5) allowing full confidentiality compromise; Oracle's August 2026 CPU advisory is referenced, but no patch or exploit details are provided in the documents.
CVE-2026-70885
Oracle Hyperion Data Relationship Management 11.2.25.0.000 has a HIGH-severity (CVSS 8.5) access and security flaw exploitable via HTTP by a low-privileged attacker, potentially causing product takeover and scope change. No exploit or patch details are provided; monitor Oracle's August 2026 CPU f...
CVE-2026-70883
Oracle Hyperion Data Relationship Management version 11.2.25.0.000 has a critical (CVSS 9.1) flaw in its Access and security component. An unauthenticated remote attacker over HTTP can gain unauthorized read/write access to all application data. Exploitation details are not provided; apply the Or...
CVE-2026-70880
Oracle Hyperion Data Relationship Management 11.2.25.0.000 has a critical flaw in its Access and security component. Unauthenticated attackers with network TCP access can fully compromise the application (CVSS 10.0), with potential scope change affecting additional products. Oracle's August 2026 ...
CVE-2026-70877
A CVSS 8.8 HIGH-severity flaw in Oracle Hyperion Data Relationship Management 11.2.25.0.000 (Access and security component) allows low-privileged, network-authenticated attackers via HTTP to fully compromise the application (C/H/I/A all High). Oracle's August 2026 CPU advisory is the patch refere...
CVE-2026-70872
Oracle Hyperion Data Relationship Management (component: Access and security), version 11.2.25.0.000, is affected by an unauthenticated, network-reachable flaw (CVSS 9.1) enabling full confidentiality and integrity compromise of accessible data; no public exploit details are available. Patch guid...
CVE-2026-70839
Vulnerability in the Oracle Financials for EMEA product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financials...
CVE-2026-70811
Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.5-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successf...
CVE-2026-70807
Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Call...
CVE-2026-70800
Vulnerability in the Oracle SDP Number Portability product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle SDP Number...
CVE-2026-70799
Oracle SDP Number Portability (component: Internal Operations) in Oracle E-Business Suite versions 12.2.3-12.2.15 is vulnerable to an easily exploitable flaw allowing unauthenticated remote attackers via HTTP to gain unauthorized access to all accessible data. CVSS 3.1 scores 7.5 (HIGH), with con...
CVE-2026-70794
Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion component: Server. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial...
CVE-2026-70778
CVE-2026-70778 affects Oracle Customer Care (Internal Operations component) in Oracle E-Business Suite versions 12.2.3-12.2.15. A low-privileged attacker with network HTTP access can trigger unauthorized creation, deletion, or modification of critical data, with scope change potentially impacting...
CVE-2026-70777
Oracle iSupplier Portal (component Internal Operations) in E-Business Suite 12.2.3–12.2.15 has an easily exploitable, unauthenticated network vulnerability (CVSS 7.5) allowing full disclosure of all accessible data. Oracle's August 2026 CPU advisory (https://www.oracle.com/security-alerts/cspuaug...
CVE-2026-70774
Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Warehouse...
CVE-2026-70761
Vulnerability in the Oracle Risk Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Risk Management...