200880 matches found
CVE-2026-70923
...
CVE-2026-70924
Oracle Web Services Manager's Web Services Security component in versions 12.2.1.4.0 and 14.1.2.0.0 allows an unauthenticated, network-based attacker (via HTTPS) to fully compromise the product. CVSS 3.1 scores this HIGH (8.1) for confidentiality, integrity, and availability. Oracle has released ...
CVE-2026-70916
...
CVE-2026-70912
...
CVE-2026-70907
A JSSE component flaw in Oracle Java SE (8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2), GraalVM for JDK, and GraalVM Enterprise (21.3.19) allows unauthenticated remote attackers via TLS to trigger partial denial of service. No exploitation details or specific patch version are provided; see O...
CVE-2026-70873
...
CVE-2026-70855
...
CVE-2026-70857
...
CVE-2026-70842
Oracle Hyperion Financial Management v11.2.25.0.000 (Security component) is affected by an easily exploitable local vulnerability (CVSS 8.4 HIGH). A low-privileged attacker with infrastructure access can compromise the product, achieving unauthorized read/write access to all accessible data, with...
CVE-2026-70832
...
CVE-2026-70828
Oracle Hyperion Financial Management 11.2.25.0.000 Security component is vulnerable to a HIGH-severity (CVSS 7.7) flaw exploitable over HTTP by a low-privileged attacker, allowing unauthorized access to critical data with scope change affecting other products. No in-the-wild exploitation details ...
CVE-2026-70829
...
CVE-2026-70822
CVE-2026-70822 affects the Security component of Oracle Hyperion Financial Management version 11.2.25.0.000 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data or complete access to all data accessible through the ...
CVE-2026-70822
...
CVE-2026-70812
A HIGH-severity vulnerability (CVSS 8.8) affects Oracle Call Center Technology within Oracle E-Business Suite, component "Internal Operations," in versions 12.2.3 through 12.2.15. An unauthenticated-to-low-privileged attacker with HTTP network access can exploit it to fully compromise the product...
CVE-2026-70812
...
CVE-2026-70798
CVE-2026-70798 affects Oracle E-Business Suite Purchasing (Internal Operations component), versions 12.2.3–12.2.15. A low-privileged local attacker can easily exploit it to take over Oracle Purchasing, with full confidentiality, integrity, and availability impact (CVSS 7.8 HIGH). No exploit detai...
CVE-2026-70794
Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) contains a local integrity vulnerability; a low-privileged local attacker can modify or delete critical data. CVSS 3.1 scores 4.7 (Medium). Exploitation requires local infrastructure access; no exploit details are provided. Apply ...