4004 matches found
CVE-2026-70872
...
CVE-2026-70863
...
CVE-2026-70859
...
CVE-2026-70858
...
CVE-2026-70861
...
CVE-2026-70849
...
CVE-2026-70828
...
CVE-2026-70795
...
CVE-2026-70793
...
CVE-2026-70786
...
CVE-2026-70765
...
CVE-2026-70763
...
CVE-2026-70749
Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) has a HIGH-severity (CVSS 8.1) unauthenticated remote vulnerability exploitable via HTTP. A network-accessible attacker can compromise the product, with full confidentiality, integrity, and availability impact. No specific root ca...
CVE-2026-70734
Oracle Autonomous Health Framework's Trace File Analyzer component (versions 26.1.0, 26.2.0, 26.3.1, 26.5.0, 26.5.2) is affected by a HIGH-severity (CVSS 7.4) local vulnerability requiring high privileges and user interaction. Successful exploitation permits unauthorized data modification/deletio...
CVE-2026-70725
Oracle E-Business Suite 12.2.3–12.2.15, Advanced Inbound Telephony component (Internal Operations), is vulnerable to network-based HTTP attacks by low-privileged attackers, enabling unauthorized data access and partial DoS (CVSS 7.6). No in-the-wild exploitation reported. Patch details: https://w...
CVE-2026-70712
...
CVE-2026-70708
The Security API component of Oracle E-Business Suite Sales Foundation (versions 12.2.3–12.2.15) has a HIGH severity (CVSS 8.1) flaw allowing low-privileged, unauthenticated network attackers to create, delete, or modify critical data and gain full data access. No exploitation evidence is provide...
CVE-2026-70706
...
CVE-2026-70704
Oracle E-Business Suite 12.2.3–12.2.15 Party Search UI has a HIGH-severity (CVSS 8.1) flaw exploitable over HTTP by unauthenticated attackers, enabling full compromise of the Trading Community component. No exploitation evidence is provided. Patch details: Oracle CSP August 2026 advisory. Monitor...
CVE-2026-70700
CVE-2026-70700 affects the Oracle Payables product of Oracle E-Business Suite (component: Internal Operations ), versions 12.2.3 through 12.2.15 . An unauthenticated attacker with network access via HTTP can trigger a hang or frequently repeatable crash, resulting in a complete denial of service ...