CVE-2026-70824

Oracle Hyperion Financial Management (component: Security) is affected in version 11.2.25.0.000. A low-privileged network attacker can exploit it via HTTP to gain unauthorized read access to critical or all accessible data (CVSS 6.5, MEDIUM). No patch details, root cause, or in-the-wild exploitat...

CVE-2026-70819

Oracle Hyperion Financial Management 11.2.25.0.000 has a HIGH-severity SQL-based security flaw exploitable by a low-privileged network attacker, enabling full system compromise (C/I/A all high). No exploitation or patch details are provided; Oracle's August 2026 CPU is the referenced remediation ...

CVE-2026-70820

...

CVE-2026-70778

...

CVE-2026-70770

...

CVE-2026-70763

...

CVE-2026-70743

Oracle Hyperion Financial Reporting Server version 11.2.25.0.000 has an unauthenticated network-exploitable flaw (CVSS 8.2) allowing attackers to access all product data and cause partial denial of service. Oracle's August 2026 CPU advisory likely contains remediation guidance. No exploit details...

CVE-2026-70737

Oracle Enterprise Manager for Systems Infrastructure, Storage Server Management component, versions 13.5 and 24.1, is vulnerable to a high-severity (CVSS 8.8) flaw: a low-privileged attacker with network HTTP access can fully compromise the product (confidentiality, integrity, and availability al...

EUVD-2026-61682

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 3.2.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Helidon. Successful attacks of this...

CVE-2026-70727

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Helidon. Successful attacks of thi...

CVE-2026-70685

...

EUVD-2026-61637

Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Calculati...

CVE-2026-70673

...

CVE-2026-62602

...

CVE-2026-62592

Oracle Siebel CRM Integration (component: Open Integration ) versions 25.12–26.6 are affected by a critical vulnerability (CVSS 3.1: 9.8 ) that allows an unauthenticated attacker with network access via HTTP to achieve full takeover of the product, impacting confidentiality, integrity, and availa...

CVE-2026-62558

The Installation and Configuration component of Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 is affected. An unauthenticated attacker with local access to the hosting infrastructure can exploit this HIGH complexity vulnerability, which requires human interaction, to gain unauth...

CVE-2026-62543

Oracle Hyperion Infrastructure Technology (Installation and Configuration component, version 11.2.25.0.000) has a critical CVSS 9.8 flaw: unauthenticated remote attackers can exploit it over HTTP to fully compromise the product (C/I/A all High). No root-cause details are provided in the documents...

EUVD-2026-61522

Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion component: Installation and Configuration. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2026-62510

...

CVE-2026-61305

A HIGH-severity vulnerability (CVSS 8.3) in Oracle BI Publisher's BI Platform Security component affects versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0. A low-privileged network attacker can gain unauthorized read/write access to all BI Publisher data and cause partial DoS. No exploitation detai...