CVE-2026-71089

Oracle Agile PLM MCAD Connector CAX Client version 3.6 is vulnerable: an unauthenticated attacker with local infrastructure access can exploit it (low complexity, human interaction required) to gain unauthorized read access to a subset of accessible data. CVSS 3.3 LOW; no exploitation observed. O...

CVE-2026-71041

A HIGH-severity local privilege escalation affects Oracle Agile PLM 9.3.6's Gantt Chart component. A low-privileged attacker with local infrastructure access can compromise the product with full C/I/A impact. Oracle's August 2026 CPU advisory (cspuaug2026.html) is the reference; no patch version ...

CVE-2026-71035

...

CVE-2026-71022

...

CVE-2026-70959

...

CVE-2026-70951

CVE-2026-70951 affects the Document Management component of Oracle Siebel CRM End User (versions 17.0–26.6 ). A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to achieve full takeover of the application, impacting co...

CVE-2026-70939

Oracle Hyperion Financial Management version 11.2.25.0.000's Security component is affected; a high-privileged network attacker can exploit it via HTTP to fully compromise the application (CVSS 7.2 HIGH). Patch details are in Oracle's August 2026 CPU advisory; no exploitation evidence is provided...

CVE-2026-70916

The Security component of Oracle Hyperion Financial Management version 11.2.25.0.000 is affected. An unauthenticated attacker with local infrastructure access can gain unauthorized read access to a subset of application data. CVSS 3.1 score 4.0 (Medium). Oracle's August 2026 CPU advisory is the p...

CVE-2026-70916

...

CVE-2026-70809

...

CVE-2026-70722

CVE-2026-70722 affects Oracle E-Business Suite (Advanced Inbound Telephony, Internal Operations) versions 12.2.3-12.2.15, exploitable over HTTPS by an unauthenticated attacker. CVSS 8.2 (HIGH) yields unauthorized data modification/deletion and partial DoS. Oracle's August 2026 CPU advisory (cspua...

CVE-2026-70696

Oracle Payments (component: File Transmission) in Oracle E-Business Suite versions 12.2.3–12.2.15 is vulnerable to an unauthenticated, network-based TCP attack (CVSS 7.5 HIGH). Successful exploitation grants unauthorized access to critical data or full Oracle Payments dataset, impacting confident...

CVE-2026-70685

Affected component: Oracle Hyperion Calculation Manager Security component, version 11.2.25.0.000. Root cause: unauthenticated attacker with local infrastructure access can compromise the application. Impact: high confidentiality breach and low integrity impact, with scope change affecting additi...

CVE-2026-70678

...

CVE-2026-70678

Oracle Hyperion Calculation Manager version 11.2.25.0.000 (Security component) is affected by a vulnerability allowing a low-privileged attacker with network access via HTTP to compromise the product. Successful exploitation requires user interaction from a person other than the attacker. Due to ...

CVE-2026-62584

...

CVE-2026-62500

The Common Events component of Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 is vulnerable to a network-accessible flaw exploitable by a low-privileged attacker via HTTP, enabling full system takeover with CVSS 3.1 score 8.8 (HIGH). Oracle's August 2026 CPU advisory addresses th...

CVE-2026-61308

...

CVE-2026-61248

...

CVE-2026-60991

Oracle Identity Manager Connector (Core component, versions 12.2.1.4.0 and 14.1.2.1.0) has an easily exploitable local vulnerability allowing low-privileged attackers to fully compromise the product; Oracle's August 2026 CPU addresses it — apply patches from https://www.oracle.com/security-alerts...