200807 matches found
CVE-2026-71053
CVE-2026-71053 affects Oracle Agile Engineering Data Management (Oracle Supply Chain), specifically the Web Services Security component in version 6.2.1 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to achieve full takeover of the product, resulting in ...
CVE-2026-71040
...
CVE-2026-71013
...
CVE-2026-71008
Oracle Commerce Experience Manager component in version 11.4.0 is affected by a network-reachable vulnerability exploitable by a high-privileged HTTP attacker, enabling unauthorized access to critical or all accessible data (CVSS 6.8, confidentiality impact). Exploitation details are not provided...
CVE-2026-70985
...
CVE-2026-70981
Oracle Commerce 11.4.0 Content Acquisition System is affected by a critical (CVSS 9.1) unauthenticated network-based vulnerability enabling unauthorized data modification and denial of service. No exploitation details are provided; refer to Oracle's August 2026 security alert for patch information.
CVE-2026-70955
...
CVE-2026-70952
...
CVE-2026-70943
The Oracle Hyperion Financial Management Security component, version 11.2.25.0.000, is vulnerable to an unauthenticated, easily exploitable flaw requiring adjacent network access. Successful exploitation grants full confidentiality and integrity compromise of all accessible HFM data. CVSS 3.1 sco...
CVE-2026-70939
Oracle Hyperion Financial Management version 11.2.25.0.000's Security component is affected; a high-privileged network attacker can exploit it via HTTP to fully compromise the application (CVSS 7.2 HIGH). Patch details are in Oracle's August 2026 CPU advisory; no exploitation evidence is provided...
CVE-2026-70933
Oracle Hyperion Financial Management 11.2.25.0.000 Security component is vulnerable; a low-privileged network attacker can access all accessible data and cause partial DoS via HTTP. CVSS 7.1 (HIGH). No exploit or in-the-wild exploitation details provided. Patch status not specified in documents.
CVE-2026-70927
...
CVE-2026-70929
Oracle Hyperion Financial Management 11.2.25.0.000 has a HIGH-severity (CVSS 8.1) Security component flaw: a low-privileged attacker with network HTTP access can gain unauthorized read/write access to all application data. No patch details or exploitation evidence are provided. Apply Oracle's Aug...
CVE-2026-70923
...
CVE-2026-70924
Oracle Web Services Manager's Web Services Security component in versions 12.2.1.4.0 and 14.1.2.0.0 allows an unauthenticated, network-based attacker (via HTTPS) to fully compromise the product. CVSS 3.1 scores this HIGH (8.1) for confidentiality, integrity, and availability. Oracle has released ...
CVE-2026-70916
...
CVE-2026-70912
...
CVE-2026-70907
A JSSE component flaw in Oracle Java SE (8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2), GraalVM for JDK, and GraalVM Enterprise (21.3.19) allows unauthenticated remote attackers via TLS to trigger partial denial of service. No exploitation details or specific patch version are provided; see O...