CVE-2026-70785

...

CVE-2026-70767

Oracle Hyperion Financial Reporting Server version 11.2.25.0.000 has an easily exploitable flaw allowing a low-privileged network attacker via HTTP to gain unauthorized access to critical or all product data (CVSS 6.5, confidentiality-only impact). No root cause or in-the-wild exploitation detail...

CVE-2026-70765

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) is vulnerable to an unauthenticated, low-complexity HTTP attack requiring human interaction. CVSS 3.1 scores it 6.1 (Medium) with scope change, enabling unauthorized read and update/insert/delete access to some product data. Explo...

CVE-2026-70765

...

CVE-2026-70753

A low-privileged, network-accessible attacker can exploit a flaw in the Server component of Oracle Hyperion Financial Reporting 11.2.25.0.000 via HTTP, requiring only user interaction, to read all accessible data and perform limited unauthorized updates. Oracle's August 2026 security advisory is ...

CVE-2026-70738

...

CVE-2026-70712

CVE-2026-70712 affects the Install component of Oracle Agile Engineering Data Management (Oracle Supply Chain), version 6.2.1 . The vulnerability allows a high-privileged local attacker to achieve full compromise of the product, resulting in complete loss of confidentiality, integrity, and availa...

CVE-2026-70713

...

CVE-2026-70703

Oracle Agile Engineering Data Management (Supply Chain, Engineering Communication Interface) version 6.2.1 is affected by a HIGH-severity (CVSS 8.2) network-based flaw allowing low-privileged attackers to gain unauthorized read/write access to critical data; no exploitation or patch details are p...

CVE-2026-70696

...

CVE-2026-70688

...

CVE-2026-70687

...

CVE-2026-70678

Oracle Hyperion Calculation Manager version 11.2.25.0.000 (Security component) is affected by a vulnerability allowing a low-privileged attacker with network access via HTTP to compromise the product. Successful exploitation requires user interaction from a person other than the attacker. Due to ...

CVE-2026-70673

...

CVE-2026-62636

...

CVE-2026-62601

Oracle Sales in E-Business Suite versions 12.2.3-12.2.15 is vulnerable in the Internal Operations component; a low-privileged attacker with network HTTP access can read all Sales data and modify some, at CVSS 7.1 (HIGH). Oracle's August 2026 CPU advisory provides patches; no exploit code is prese...

CVE-2026-62566

CVE-2026-62566 affects Oracle Hyperion Infrastructure Technology version 11.2.25.0.000, in the Installation and Configuration component. An unauthenticated, network-accessible attacker can exploit it via HTTP to gain unauthorized read access to a subset of data, scoring CVSS 5.3 (Medium). Oracle'...

CVE-2026-62570

Oracle Hyperion Infrastructure Technology 11.2.25.0.000 has a local, low-severity (CVSS 3.0) flaw in its Installation and Configuration component; a high-privileged attacker with system access can achieve limited data modification and partial denial of service. No exploitation details are provide...

CVE-2026-62570

...

CVE-2026-62538

Oracle's August 2026 Critical Patch Update fixes a HIGH (CVSS 7.4) vulnerability in the Installation and Configuration component of Hyperion Infrastructure Technology 11.2.25.0.000, allowing an unauthenticated network attacker to compromise confidentiality and integrity of all accessible data; or...