4004 matches found
CVE-2026-73893
...
CVE-2026-73893
...
CVE-2026-73879
Oracle Helidon 4.5.1's Imperative Web Server component is affected by a HIGH severity (CVSS 7.5) unauthenticated, network-reachable integrity vulnerability. No root cause, exploit details, or patch version are provided; monitor Oracle's CSP August 2026 advisory for remediation guidance.
CVE-2026-73876
...
CVE-2026-73866
Oracle Helidon 4.5.0's Imperative Web Server component contains a critical vulnerability (CVSS 9.1) exploitable by an unauthenticated network attacker via HTTP, granting unauthorized creation, deletion, and modification of all Helidon-accessible data. No patch version, exploit details, or in-the-...
CVE-2026-71152
...
CVE-2026-71149
...
CVE-2026-71106
Oracle Hospitality OPERA 5 Property Services (component: Opera Servlet ) is affected by a vulnerability in versions 5.6.28.0–5.6.28.1 . An unauthenticated attacker with network access via HTTP can achieve full system takeover (complete compromise of confidentiality, integrity, and availability). ...
CVE-2026-71095
...
CVE-2026-71069
...
CVE-2026-71065
CVE-2026-71065 is a critical vulnerability (CVSS 3.1: 9.3) in Oracle Helidon (component: Imperative Web Server), affecting version 3.2.18 . An unauthenticated attacker with network access via HTTP can exploit it to gain unauthorized access to critical data and perform unauthorized update, insert,...
CVE-2026-71057
A HIGH-severity (CVSS 8.5) HTTP-accessible vulnerability in Oracle BI Publisher's BI Platform Security component affects versions 8.2.0.0.0, 12.2.1.4.0, and 26.1.0.0.0, allowing a low-privileged attacker to access critical data and cause partial denial of service. Oracle's August 2026 security ad...
CVE-2026-71034
Oracle Commerce 11.4.0 (component: Forge) is vulnerable to an unauthenticated SOAP-based attack via network access. Successful exploitation enables an attacker to gain unauthorized access to critical data or complete access to all accessible Oracle Commerce data, with confidentiality impact rated...
CVE-2026-71031
Oracle Commerce 11.4.0's Endeca Application Controller component is vulnerable via HTTP to an unauthenticated, easily exploitable attack requiring user interaction (CVSS 6.1). Successful attacks enable unauthorized read, update, insert, and delete access to affected data with scope change to addi...
CVE-2026-71029
Oracle Helidon 3.2.18 Imperative Web Server component is affected by a CVSS 6.8 medium-severity vulnerability allowing unauthenticated remote attackers to compromise Helidon and access critical data, with potential scope change impacting additional products. No patch or exploit details are provid...
CVE-2026-71024
...
CVE-2026-71017
Oracle Commerce 11.4.0's Endeca Application Controller is vulnerable to an unauthenticated, network-accessible HTTP attack (CVSS 6.5, HIGH complexity). Successful exploitation yields unauthorized access to critical data and partial denial of service. No exploit details are provided; Oracle's Augu...
CVE-2026-71015
Oracle Commerce 11.4.0 (Endeca Application Controller) has a critical CVSS 9.1 flaw exploitable by unauthenticated attackers over HTTP, enabling unauthorized data creation, deletion, modification, and full data access; no exploit details are provided, and the Oracle CSP advisory (cspuaug2026.html...