3451 matches found
CVE-2026-71149
...
CVE-2026-71106
Oracle Hospitality OPERA 5 Property Services (component: Opera Servlet ) is affected by a vulnerability in versions 5.6.28.0–5.6.28.1 . An unauthenticated attacker with network access via HTTP can achieve full system takeover (complete compromise of confidentiality, integrity, and availability). ...
CVE-2026-71069
...
CVE-2026-71065
CVE-2026-71065 is a critical vulnerability (CVSS 3.1: 9.3) in Oracle Helidon (component: Imperative Web Server), affecting version 3.2.18 . An unauthenticated attacker with network access via HTTP can exploit it to gain unauthorized access to critical data and perform unauthorized update, insert,...
CVE-2026-71057
A HIGH-severity (CVSS 8.5) HTTP-accessible vulnerability in Oracle BI Publisher's BI Platform Security component affects versions 8.2.0.0.0, 12.2.1.4.0, and 26.1.0.0.0, allowing a low-privileged attacker to access critical data and cause partial denial of service. Oracle's August 2026 security ad...
CVE-2026-71034
Oracle Commerce 11.4.0 (component: Forge) is vulnerable to an unauthenticated SOAP-based attack via network access. Successful exploitation enables an attacker to gain unauthorized access to critical data or complete access to all accessible Oracle Commerce data, with confidentiality impact rated...
CVE-2026-71031
Oracle Commerce 11.4.0's Endeca Application Controller component is vulnerable via HTTP to an unauthenticated, easily exploitable attack requiring user interaction (CVSS 6.1). Successful attacks enable unauthorized read, update, insert, and delete access to affected data with scope change to addi...
CVE-2026-71029
Oracle Helidon 3.2.18 Imperative Web Server component is affected by a CVSS 6.8 medium-severity vulnerability allowing unauthenticated remote attackers to compromise Helidon and access critical data, with potential scope change impacting additional products. No patch or exploit details are provid...
CVE-2026-71017
Oracle Commerce 11.4.0's Endeca Application Controller is vulnerable to an unauthenticated, network-accessible HTTP attack (CVSS 6.5, HIGH complexity). Successful exploitation yields unauthorized access to critical data and partial denial of service. No exploit details are provided; Oracle's Augu...
CVE-2026-71015
Oracle Commerce 11.4.0 (Endeca Application Controller) has a critical CVSS 9.1 flaw exploitable by unauthenticated attackers over HTTP, enabling unauthorized data creation, deletion, modification, and full data access; no exploit details are provided, and the Oracle CSP advisory (cspuaug2026.html...
CVE-2026-70995
The Endeca Application Controller component in Oracle Commerce 11.4.0 is critically vulnerable (CVSS 9.8) to unauthenticated remote HTTP attacks, enabling full system takeover. Oracle has released patches via its August 2026 Critical Patch Update; organizations should apply them immediately. No p...
CVE-2026-70972
...
CVE-2026-70970
CVE-2026-70970 affects the Runtime Tools component of Oracle WebCenter Portal (versions 12.2.1.4.0 and 14.1.2.0.0). An unauthenticated attacker with network HTTP access can compromise the application; CVSS 9.8 (critical) reflects full confidentiality, integrity, and availability impact. Oracle's ...
CVE-2026-70965
...
CVE-2026-70959
...
CVE-2026-70936
...
CVE-2026-70938
...
CVE-2026-70935
Oracle Hyperion Financial Management 11.2.25.0.000 has a Security-component flaw: a low-privileged attacker with network HTTP access can read all accessible data (HIGH confidentiality) and cause partial DoS (LOW availability), CVSS 7.1. No patch version or exploit details are provided; see Oracle...
CVE-2026-70890
Oracle Hyperion DRM 11.2.25.0.000 has an unauthenticated, easily exploitable HTTP access-and-security flaw (CVSS 7.5) allowing full confidentiality compromise; Oracle's August 2026 CPU advisory is referenced, but no patch or exploit details are provided in the documents.