CVE-2026-70678

Oracle Hyperion Calculation Manager version 11.2.25.0.000 (Security component) is affected by a vulnerability allowing a low-privileged attacker with network access via HTTP to compromise the product. Successful exploitation requires user interaction from a person other than the attacker. Due to ...

CVE-2026-70673

...

CVE-2026-62636

...

CVE-2026-62601

Oracle Sales in E-Business Suite versions 12.2.3-12.2.15 is vulnerable in the Internal Operations component; a low-privileged attacker with network HTTP access can read all Sales data and modify some, at CVSS 7.1 (HIGH). Oracle's August 2026 CPU advisory provides patches; no exploit code is prese...

CVE-2026-62566

CVE-2026-62566 affects Oracle Hyperion Infrastructure Technology version 11.2.25.0.000, in the Installation and Configuration component. An unauthenticated, network-accessible attacker can exploit it via HTTP to gain unauthorized read access to a subset of data, scoring CVSS 5.3 (Medium). Oracle'...

CVE-2026-62570

Oracle Hyperion Infrastructure Technology 11.2.25.0.000 has a local, low-severity (CVSS 3.0) flaw in its Installation and Configuration component; a high-privileged attacker with system access can achieve limited data modification and partial denial of service. No exploitation details are provide...

CVE-2026-62570

...

CVE-2026-62538

Oracle's August 2026 Critical Patch Update fixes a HIGH (CVSS 7.4) vulnerability in the Installation and Configuration component of Hyperion Infrastructure Technology 11.2.25.0.000, allowing an unauthenticated network attacker to compromise confidentiality and integrity of all accessible data; or...

CVE-2026-62520

...

CVE-2026-62458

Oracle E-Business Suite (component: Internal Operations of Work in Process) versions 12.2.3–12.2.15 are affected by a HIGH-severity (CVSS 7.1) vulnerability exploitable over HTTP by a low-privileged attacker, enabling denial-of-service (hang/crash) and unauthorized data modification. No in-the-wi...

CVE-2026-62442

...

CVE-2026-61332

...

CVE-2026-61326

...

CVE-2026-61319

...

CVE-2026-61295

CVE-2026-61295 affects Oracle WebCenter Content Content Server in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated local attacker can exploit it to gain unauthorized access to critical or all accessible data. CVSS 3.1 base score is 7.1 (HIGH). No exploitation detail...

CVE-2026-61284

A HIGH-severity (CVSS 8.8) flaw in Oracle Enterprise Manager's Application Config Console affects versions 13.5 and 24.1; an HTTP-accessible, low-privilege attacker can fully compromise the platform (C/I/A impacts). Exploitation details and fix version are not provided in the documents; apply Ora...

CVE-2026-61259

...

CVE-2026-61227

CVE-2026-61227 affects the Runtime Tools component of Oracle WebCenter Portal (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though user interaction is required . Due to a scope change , succe...

CVE-2026-61029

...

CVE-2026-61007

Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0 are affected by an unauthenticated, network-accessible vulnerability (CVSS 7.5 HIGH) allowing unauthorized access to all site data. Oracle's August 2026 security advisory provides patch details; no exploitation evidence is provided in the ...