EUVD-2026-61824

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-61822

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle...

EUVD-2026-61823

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-70870

Oracle Hyperion Data Relationship Management 11.2.23.0.000, Web Client - Unicode component, is vulnerable to unauthenticated HTTP attacks allowing full data access and partial DoS. CVSS 8.2 HIGH (C:H/A:L). Patch details are not provided; no exploitation reported. See Oracle CSP Aug 2026 advisory....

CVE-2026-70868

Oracle Application Testing Suite 13.3.0.1 has a HIGH-severity (CVSS 8.1) network-reachable flaw exploitable by unauthenticated attackers via HTTP, potentially allowing full system takeover. Oracle published patch guidance in its August 2026 security advisory (cspuaug2026.html). No exploitation de...

CVE-2026-70871

Oracle Hyperion Data Relationship Management version 11.2.25.0.000 has an unauthenticated, easily exploitable vulnerability in its Access and security component via TCP, allowing full product takeover with CVSS 9.8. Exploitation in the wild is not documented; Oracle's August 2026 security alert s...

CVE-2026-70866

Oracle Application Testing Suite version 13.3.0.1 is affected by a local privilege escalation vulnerability exploitable by a low-privileged attacker with the "Load Testing for Web Apps" privilege. The flaw carries a CVSS 3.1 Base Score of 7.8 (HIGH) with full confidentiality, integrity, and avail...

CVE-2026-70857

CVE-2026-70857 affects Oracle Siebel CRM Open UI (versions 17.0–26.6), exploitable by a low-privileged, network-accessible attacker requiring human interaction; successful attacks grant unauthorized access, creation, deletion, or modification of critical Siebel CRM data. Oracle's August 2026 CPU ...

CVE-2026-70857

...

EUVD-2026-61804

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Financia...

EUVD-2026-61805

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial...

CVE-2026-70853

...

EUVD-2026-61802

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...

CVE-2026-70850

Oracle Hyperion Financial Management 11.2.25.0.000 Security component is affected by a LOW-severity local vulnerability (CVSS 3.0) requiring high privileges; a local attacker can modify data and cause partial DoS. No exploitation details are provided; monitor Oracle's August 2026 advisory for pat...

CVE-2026-70851

Oracle Hyperion Financial Management 11.2.25.0.000 has a Security component flaw exploitable over HTTP by a low-privileged attacker, causing partial denial of service (CVSS 3.1 base score 3.1, LOW). No exploit code or in-the-wild exploitation is documented; refer to Oracle's CSPUAugust2026 adviso...

EUVD-2026-61801

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hyperion Financial...

EUVD-2026-61800

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...

CVE-2026-70846

Oracle Demand Planning (versions 12.1 and 12.2, Supply Chain "Internal Operations" component) has a critical (CVSS 9.6) flaw: a low-privilege attacker with network HTTP access can gain unauthorized read/write access to all accessible data, with scope change potentially impacting additional produc...

EUVD-2026-61799

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financia...

CVE-2026-70844

Oracle E-Business Suite's Oracle Loans product (Internal Operations component), versions 12.2.3 through 12.2.15, contains an easily exploitable flaw allowing a low-privileged, network-based attacker via HTTP to access critical data and perform unauthorized update, insert, or delete operations. CV...