311551 matches found
CVE-2026-73866
Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...
CVE-2026-71164
Oracle Helidon 3.2.18 (Imperative Web Server component) has a critical remotely exploitable vulnerability allowing unauthenticated network attackers to fully compromise the server (CVSS 9.8). Oracle's August 2026 CPU advisory is the primary reference for patch details. No exploitation details are...
CVE-2026-71157
Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. Supported versions that are affected are 3.0.0-3.2.17 and 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful...
CVE-2026-71098
The vulnerability is in the Platform Security component of Oracle Business Intelligence Enterprise Edition (affected version 26.01.0.0.0). A low-privileged attacker with local system access can exploit it to fully compromise the BIE instance (CVSS 7.0 HIGH). The NCSC advisory confirms Oracle has ...
CVE-2026-71077
The vulnerability affects Oracle Agile PLM MCAD Connector (CAX Client component), version 3.6, allowing an unauthenticated attacker on the physical network segment to access critical or all connector data. CVSS 3.1 score 5.3 (Medium), confidentiality-only impact. No in-the-wild exploitation repor...
CVE-2026-71058
...
CVE-2026-71051
...
CVE-2026-71036
Oracle Commerce version 11.4.0 Experience Manager component is vulnerable to an unauthenticated, network-accessible attack (CVSS 9.1) allowing full confidentiality and integrity compromise. Oracle's August 2026 CPU advisory provides patch details; no exploitation evidence is present in the provid...
CVE-2026-71018
Oracle Commerce 11.4.0's Endeca Application Controller is vulnerable: unauthenticated remote attackers can exploit it via HTTP to read all accessible data and modify some data, requiring victim interaction; CVSS 3.1 score 8.2 (High). No specific root cause or patch details are provided. No known ...
CVE-2026-71019
...
CVE-2026-71010
...
EUVD-2026-61948
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Experience Manager. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...
CVE-2026-70995
The Endeca Application Controller component in Oracle Commerce 11.4.0 is critically vulnerable (CVSS 9.8) to unauthenticated remote HTTP attacks, enabling full system takeover. Oracle has released patches via its August 2026 Critical Patch Update; organizations should apply them immediately. No p...
CVE-2026-70981
...
CVE-2026-70958
...
CVE-2026-70943
The Oracle Hyperion Financial Management Security component, version 11.2.25.0.000, is vulnerable to an unauthenticated, easily exploitable flaw requiring adjacent network access. Successful exploitation grants full confidentiality and integrity compromise of all accessible HFM data. CVSS 3.1 sco...
CVE-2026-70939
Oracle Hyperion Financial Management version 11.2.25.0.000's Security component is affected; a high-privileged network attacker can exploit it via HTTP to fully compromise the application (CVSS 7.2 HIGH). Patch details are in Oracle's August 2026 CPU advisory; no exploitation evidence is provided...
CVE-2026-70936
...