CVE-2026-70759

Oracle Hyperion Financial Reporting Server (affected version 11.2.25.0.000) has a medium-severity (CVSS 5.4) flaw exploitable via unauthenticated HTTP access, requiring user interaction, enabling unauthorized read, update, insert, and delete access to accessible data. Oracle's August 2026 securit...

CVE-2026-70753

A low-privileged, network-accessible attacker can exploit a flaw in the Server component of Oracle Hyperion Financial Reporting 11.2.25.0.000 via HTTP, requiring only user interaction, to read all accessible data and perform limited unauthorized updates. Oracle's August 2026 security advisory is ...

CVE-2026-70751

...

CVE-2026-70744

Oracle Hyperion Financial Reporting 11.2.25.0.000 Server component has a HIGH severity (CVSS 8.1) unauthenticated remote vulnerability exploitable via HTTP, potentially leading to full product compromise; no exploit or in-the-wild activity details are provided in the documents.

CVE-2026-70738

...

CVE-2026-70713

...

CVE-2026-70712

CVE-2026-70712 affects the Install component of Oracle Agile Engineering Data Management (Oracle Supply Chain), version 6.2.1 . The vulnerability allows a high-privileged local attacker to achieve full compromise of the product, resulting in complete loss of confidentiality, integrity, and availa...

CVE-2026-70703

Oracle Agile Engineering Data Management (Supply Chain, Engineering Communication Interface) version 6.2.1 is affected by a HIGH-severity (CVSS 8.2) network-based flaw allowing low-privileged attackers to gain unauthorized read/write access to critical data; no exploitation or patch details are p...

CVE-2026-70698

...

CVE-2026-70695

CVE-2026-70695 affects the File Transmission component of Oracle Payments within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A high-privileged attacker with network access via HTTP can exploit this vulnerability to perform unauthorized creation, deletion, or modification of critic...

CVE-2026-70696

...

CVE-2026-70688

...

CVE-2026-70687

...

CVE-2026-70678

Oracle Hyperion Calculation Manager version 11.2.25.0.000 (Security component) is affected by a vulnerability allowing a low-privileged attacker with network access via HTTP to compromise the product. Successful exploitation requires user interaction from a person other than the attacker. Due to ...

CVE-2026-70673

...

CVE-2026-62636

...

CVE-2026-62611

...

CVE-2026-62601

Oracle Sales in E-Business Suite versions 12.2.3-12.2.15 is vulnerable in the Internal Operations component; a low-privileged attacker with network HTTP access can read all Sales data and modify some, at CVSS 7.1 (HIGH). Oracle's August 2026 CPU advisory provides patches; no exploit code is prese...

CVE-2026-62566

CVE-2026-62566 affects Oracle Hyperion Infrastructure Technology version 11.2.25.0.000, in the Installation and Configuration component. An unauthenticated, network-accessible attacker can exploit it via HTTP to gain unauthorized read access to a subset of data, scoring CVSS 5.3 (Medium). Oracle'...

CVE-2026-62569

Oracle Hyperion Infrastructure Technology version 11.2.25.0.000, component Installation and Configuration, is affected by a locally exploitable vulnerability requiring high privileges, enabling unauthorized data modification and partial denial of service. CVSS 3.1 score is 3.4 (Low). Oracle's Aug...