143163 matches found
CVE-2026-70822
...
CVE-2026-70812
A HIGH-severity vulnerability (CVSS 8.8) affects Oracle Call Center Technology within Oracle E-Business Suite, component "Internal Operations," in versions 12.2.3 through 12.2.15. An unauthenticated-to-low-privileged attacker with HTTP network access can exploit it to fully compromise the product...
CVE-2026-70812
...
CVE-2026-70798
CVE-2026-70798 affects Oracle E-Business Suite Purchasing (Internal Operations component), versions 12.2.3–12.2.15. A low-privileged local attacker can easily exploit it to take over Oracle Purchasing, with full confidentiality, integrity, and availability impact (CVSS 7.8 HIGH). No exploit detai...
CVE-2026-70794
Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) contains a local integrity vulnerability; a low-privileged local attacker can modify or delete critical data. CVSS 3.1 scores 4.7 (Medium). Exploitation requires local infrastructure access; no exploit details are provided. Apply ...
CVE-2026-70795
...
CVE-2026-70785
...
CVE-2026-70767
Oracle Hyperion Financial Reporting Server version 11.2.25.0.000 has an easily exploitable flaw allowing a low-privileged network attacker via HTTP to gain unauthorized access to critical or all product data (CVSS 6.5, confidentiality-only impact). No root cause or in-the-wild exploitation detail...
CVE-2026-70765
Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) is vulnerable to an unauthenticated, low-complexity HTTP attack requiring human interaction. CVSS 3.1 scores it 6.1 (Medium) with scope change, enabling unauthorized read and update/insert/delete access to some product data. Explo...
CVE-2026-70765
...
CVE-2026-70753
A low-privileged, network-accessible attacker can exploit a flaw in the Server component of Oracle Hyperion Financial Reporting 11.2.25.0.000 via HTTP, requiring only user interaction, to read all accessible data and perform limited unauthorized updates. Oracle's August 2026 security advisory is ...
CVE-2026-70738
...
CVE-2026-70713
...
CVE-2026-70712
CVE-2026-70712 affects the Install component of Oracle Agile Engineering Data Management (Oracle Supply Chain), version 6.2.1 . The vulnerability allows a high-privileged local attacker to achieve full compromise of the product, resulting in complete loss of confidentiality, integrity, and availa...
CVE-2026-70703
Oracle Agile Engineering Data Management (Supply Chain, Engineering Communication Interface) version 6.2.1 is affected by a HIGH-severity (CVSS 8.2) network-based flaw allowing low-privileged attackers to gain unauthorized read/write access to critical data; no exploitation or patch details are p...
CVE-2026-70696
...
CVE-2026-70688
...
CVE-2026-70687
...
CVE-2026-70678
Oracle Hyperion Calculation Manager version 11.2.25.0.000 (Security component) is affected by a vulnerability allowing a low-privileged attacker with network access via HTTP to compromise the product. Successful exploitation requires user interaction from a person other than the attacker. Due to ...