CVE-2026-70872

...

CVE-2026-70859

...

CVE-2026-70849

...

CVE-2026-70828

...

CVE-2026-70793

...

CVE-2026-70786

...

CVE-2026-70765

...

CVE-2026-70749

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) has a HIGH-severity (CVSS 8.1) unauthenticated remote vulnerability exploitable via HTTP. A network-accessible attacker can compromise the product, with full confidentiality, integrity, and availability impact. No specific root ca...

CVE-2026-70734

Oracle Autonomous Health Framework's Trace File Analyzer component (versions 26.1.0, 26.2.0, 26.3.1, 26.5.0, 26.5.2) is affected by a HIGH-severity (CVSS 7.4) local vulnerability requiring high privileges and user interaction. Successful exploitation permits unauthorized data modification/deletio...

CVE-2026-70725

Oracle E-Business Suite 12.2.3–12.2.15, Advanced Inbound Telephony component (Internal Operations), is vulnerable to network-based HTTP attacks by low-privileged attackers, enabling unauthorized data access and partial DoS (CVSS 7.6). No in-the-wild exploitation reported. Patch details: https://w...

CVE-2026-70708

The Security API component of Oracle E-Business Suite Sales Foundation (versions 12.2.3–12.2.15) has a HIGH severity (CVSS 8.1) flaw allowing low-privileged, unauthenticated network attackers to create, delete, or modify critical data and gain full data access. No exploitation evidence is provide...

CVE-2026-70704

Oracle E-Business Suite 12.2.3–12.2.15 Party Search UI has a HIGH-severity (CVSS 8.1) flaw exploitable over HTTP by unauthenticated attackers, enabling full compromise of the Trading Community component. No exploitation evidence is provided. Patch details: Oracle CSP August 2026 advisory. Monitor...

CVE-2026-70700

CVE-2026-70700 affects the Oracle Payables product of Oracle E-Business Suite (component: Internal Operations ), versions 12.2.3 through 12.2.15 . An unauthenticated attacker with network access via HTTP can trigger a hang or frequently repeatable crash, resulting in a complete denial of service ...

CVE-2026-62636

Oracle Reports Developer 14.1.2.0.0 (Security and Authentication component) is vulnerable to an unauthenticated, remotely exploitable SOAP attack (CVSS 8.6) yielding unauthorized data access, modification, and partial DoS. Oracle's August 2026 Critical Patch Update addresses it; apply patches per...

CVE-2026-62501

...

CVE-2026-62500

...

CVE-2026-62492

Oracle Hyperion Infrastructure Technology (component: Common Security), affected version 11.2.25.0.000, contains a HIGH-severity vulnerability (CVSS 7.4) exploitable via HTTPS by an unauthenticated network attacker. Successful exploitation can result in unauthorized creation, deletion, or modific...

CVE-2026-61319

...

CVE-2026-61290

A HIGH-severity (CVSS 7.1) vulnerability in Oracle WebCenter Content's Content Server component affects versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network HTTP access can exploit it (requiring human interaction and high complexity) to compromise all three security pillars ...

CVE-2026-61284

A HIGH-severity (CVSS 8.8) flaw in Oracle Enterprise Manager's Application Config Console affects versions 13.5 and 24.1; an HTTP-accessible, low-privilege attacker can fully compromise the platform (C/I/A impacts). Exploitation details and fix version are not provided in the documents; apply Ora...