200824 matches found
CVE-2026-70698
...
CVE-2026-70695
CVE-2026-70695 affects the File Transmission component of Oracle Payments within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A high-privileged attacker with network access via HTTP can exploit this vulnerability to perform unauthorized creation, deletion, or modification of critic...
CVE-2026-70696
...
CVE-2026-70688
...
CVE-2026-70687
...
CVE-2026-70678
Oracle Hyperion Calculation Manager version 11.2.25.0.000 (Security component) is affected by a vulnerability allowing a low-privileged attacker with network access via HTTP to compromise the product. Successful exploitation requires user interaction from a person other than the attacker. Due to ...
CVE-2026-70673
...
CVE-2026-62636
...
CVE-2026-62611
...
CVE-2026-62601
Oracle Sales in E-Business Suite versions 12.2.3-12.2.15 is vulnerable in the Internal Operations component; a low-privileged attacker with network HTTP access can read all Sales data and modify some, at CVSS 7.1 (HIGH). Oracle's August 2026 CPU advisory provides patches; no exploit code is prese...
CVE-2026-62566
CVE-2026-62566 affects Oracle Hyperion Infrastructure Technology version 11.2.25.0.000, in the Installation and Configuration component. An unauthenticated, network-accessible attacker can exploit it via HTTP to gain unauthorized read access to a subset of data, scoring CVSS 5.3 (Medium). Oracle'...
CVE-2026-62570
Oracle Hyperion Infrastructure Technology 11.2.25.0.000 has a local, low-severity (CVSS 3.0) flaw in its Installation and Configuration component; a high-privileged attacker with system access can achieve limited data modification and partial denial of service. No exploitation details are provide...
CVE-2026-62569
Oracle Hyperion Infrastructure Technology version 11.2.25.0.000, component Installation and Configuration, is affected by a locally exploitable vulnerability requiring high privileges, enabling unauthorized data modification and partial denial of service. CVSS 3.1 score is 3.4 (Low). Oracle's Aug...
CVE-2026-62570
...
CVE-2026-62538
Oracle's August 2026 Critical Patch Update fixes a HIGH (CVSS 7.4) vulnerability in the Installation and Configuration component of Hyperion Infrastructure Technology 11.2.25.0.000, allowing an unauthenticated network attacker to compromise confidentiality and integrity of all accessible data; or...
CVE-2026-62520
...
CVE-2026-62458
Oracle E-Business Suite (component: Internal Operations of Work in Process) versions 12.2.3–12.2.15 are affected by a HIGH-severity (CVSS 7.1) vulnerability exploitable over HTTP by a low-privileged attacker, enabling denial-of-service (hang/crash) and unauthorized data modification. No in-the-wi...
CVE-2026-62442
...