CVE-2026-71135

...

CVE-2026-71109

Oracle Hyperion Financial Management 11.2.25.0.000 Security component has an easily exploitable local vulnerability allowing high-privileged attackers with infrastructure access to fully compromise the product (CVSS 6.7). No exploitation details are provided. Patch status is not specified in the ...

CVE-2026-71050

...

CVE-2026-71044

Oracle Agile PLM (Oracle Supply Chain, component: Export ) version 9.3.6 is affected by a vulnerability that allows a low-privileged attacker with network access via HTTP to achieve full takeover of the application. The CVSS 3.1 score is 8.8 (HIGH) with impacts to confidentiality, integrity, and ...

CVE-2026-71025

...

CVE-2026-70942

Oracle's August 2026 Critical Patch Update (referenced in the CVE) addresses CVE-2026-70942 in the Security component of HFM 11.2.25.0.000, a HIGH-severity issue exploitable by low-privileged network attackers with no user interaction. No exploitation details are provided; apply Oracle's August 2...

CVE-2026-70906

CVE-2026-70906 is a denial-of-service vulnerability in the 2D component of Oracle Java SE , affecting versions 25.0.4 and 26.0.2 . The underlying issue relates to font loading , as indicated by the associated OpenJDK security advisory (RLSA-2026:55798). An unauthenticated attacker with network ac...

CVE-2026-70903

...

CVE-2026-70891

...

CVE-2026-70885

Oracle Hyperion Data Relationship Management 11.2.25.0.000 has a HIGH-severity (CVSS 8.5) access and security flaw exploitable via HTTP by a low-privileged attacker, potentially causing product takeover and scope change. No exploit or patch details are provided; monitor Oracle's August 2026 CPU f...

CVE-2026-70844

Oracle E-Business Suite's Oracle Loans product (Internal Operations component), versions 12.2.3 through 12.2.15, contains an easily exploitable flaw allowing a low-privileged, network-based attacker via HTTP to access critical data and perform unauthorized update, insert, or delete operations. CV...

CVE-2026-70821

...

CVE-2026-70792

A vulnerability in the Internal Operations component of Oracle Yard Management (Oracle E-Business Suite, versions 12.2.3–12.2.15) allows a low-privileged attacker with network HTTP access to compromise the application, with successful exploitation enabling full takeover (CVSS 3.1 base score 8.8, ...

CVE-2026-70793

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) has a network-accessible vulnerability exploitable by low-privileged attackers via HTTP, enabling unauthorized data read, insert, update, and delete. CVSS 3.1 scores 4.2 (Medium). No exploitation details or patches are provided in...

CVE-2026-70734

Oracle Autonomous Health Framework's Trace File Analyzer component (versions 26.1.0, 26.2.0, 26.3.1, 26.5.0, 26.5.2) is affected by a HIGH-severity (CVSS 7.4) local vulnerability requiring high privileges and user interaction. Successful exploitation permits unauthorized data modification/deletio...

CVE-2026-70701

Affected: Oracle E-Business Suite Payables, component Internal Operations, versions 12.2.3–12.2.15. A low-privileged network attacker can compromise Payables data confidentiality and integrity (CVSS 8.1, HIGH). Exploitation details are not provided. Apply Oracle Critical Patch Update referenced a...

CVE-2026-62639

CVE-2026-62639 is a critical vulnerability in Oracle Reports Developer (Oracle Fusion Middleware), specifically in the Security and Authentication component, affecting version 14.1.2.0.0 . An unauthenticated attacker with network access via CORBA can exploit this flaw to achieve full takeover of ...

CVE-2026-62592

Oracle Siebel CRM Integration (component: Open Integration ) versions 25.12–26.6 are affected by a critical vulnerability (CVSS 3.1: 9.8 ) that allows an unauthenticated attacker with network access via HTTP to achieve full takeover of the product, impacting confidentiality, integrity, and availa...

CVE-2026-62554

...

CVE-2026-62462

Oracle E-Business Suite Work in Process (component: Internal Operations) versions 12.2.3-12.2.15 is vulnerable. A low-privileged attacker with network access via HTTP can exploit it for full CIA impact (CVSS 8.8 HIGH). Oracle's August 2026 CPU advisory is referenced for patch details; no exploit ...