CVE-2026-70819

Oracle Hyperion Financial Management 11.2.25.0.000 has a HIGH-severity SQL-based security flaw exploitable by a low-privileged network attacker, enabling full system compromise (C/I/A all high). No exploitation or patch details are provided; Oracle's August 2026 CPU is the referenced remediation ...

CVE-2026-70818

Oracle Hyperion Financial Management version 11.2.25.0.000 contains a HIGH-severity (CVSS 8.8) SQL-based Security component flaw. A low-privileged, network-accessible attacker can exploit it to fully compromise CIA triad — leading to application takeover. No exploitation evidence or patch details...

CVE-2026-70816

Oracle E-Business Suite Financials for EMEA (component: Internal Operations) versions 12.2.3–12.2.15 are vulnerable. A low-privileged attacker with network HTTP access can obtain unauthorized read access to critical data and perform limited unauthorized updates, inserts, or deletes. CVSS 3.1 base...

CVE-2026-70812

A HIGH-severity vulnerability (CVSS 8.8) affects Oracle Call Center Technology within Oracle E-Business Suite, component "Internal Operations," in versions 12.2.3 through 12.2.15. An unauthenticated-to-low-privileged attacker with HTTP network access can exploit it to fully compromise the product...

CVE-2026-70815

Oracle Internet Procurement Connector (component: Internal Operations) in EBS 12.2.3–12.2.15 is vulnerable to a HIGH-severity (CVSS 8.1) flaw exploitable by a low-privileged remote attacker over HTTP, enabling unauthorized read/write access to all accessible procurement data. No exploitation evid...

CVE-2026-70806

Oracle E-Business Tax (Internal Operations component) in EBS 12.2.3–12.2.15 has a local, low-complexity flaw exploitable by a low-privilege attacker with infrastructure access, enabling unauthorized data modification and DoS. CVSS 7.1 HIGH. Oracle patch details are in the August 2026 CPU advisory...

CVE-2026-70802

Oracle Public Sector Human Resources (Regression Testing component) in EBS versions 12.2.3–12.2.15 is affected by a high-severity flaw exploitable over HTTP by a high-privileged attacker, causing full product takeover with scope change; Oracle's August 2026 CPU advisory provides patch details: ht...

CVE-2026-70798

CVE-2026-70798 affects Oracle E-Business Suite Purchasing (Internal Operations component), versions 12.2.3–12.2.15. A low-privileged local attacker can easily exploit it to take over Oracle Purchasing, with full confidentiality, integrity, and availability impact (CVSS 7.8 HIGH). No exploit detai...

CVE-2026-70797

Oracle E-Business Suite's Purchasing component (Internal Operations) in versions 12.2.3 through 12.2.15 is affected by a HIGH-severity (CVSS 7.2) vulnerability exploitable over HTTP by a high-privileged attacker, enabling full confidentiality, integrity, and availability impact. Oracle's August 2...

CVE-2026-70794

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) contains a local integrity vulnerability; a low-privileged local attacker can modify or delete critical data. CVSS 3.1 scores 4.7 (Medium). Exploitation requires local infrastructure access; no exploit details are provided. Apply ...

CVE-2026-70792

A vulnerability in the Internal Operations component of Oracle Yard Management (Oracle E-Business Suite, versions 12.2.3–12.2.15) allows a low-privileged attacker with network HTTP access to compromise the application, with successful exploitation enabling full takeover (CVSS 3.1 base score 8.8, ...

CVE-2026-70793

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) has a network-accessible vulnerability exploitable by low-privileged attackers via HTTP, enabling unauthorized data read, insert, update, and delete. CVSS 3.1 scores 4.2 (Medium). No exploitation details or patches are provided in...

CVE-2026-70789

Oracle Hyperion Financial Reporting Server (v11.2.25.0.000) is exploitable via HTTP by an unauthenticated attacker requiring human interaction (CVSS 5.9). Oracle's CSA bulletin for August 2026 covers the patch. No exploit code or in-the-wild activity is reported in the provided documents.

CVE-2026-70785

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) has a low-severity vulnerability exploitable via HTTP by an unauthenticated network attacker with high attack complexity, enabling unauthorized read access to a subset of application data. No exploitation evidence or patch details...

CVE-2026-70781

Oracle E-Business Suite's Proposals product, Internal Operations component, versions 12.2.3 to 12.2.15, is vulnerable to a HIGH-severity (CVSS 7.2) issue exploitable by a high-privileged network attacker over HTTP, enabling full takeover. Oracle's August 2026 CPU advisory provides patches. Exploi...

CVE-2026-70779

Oracle iSupplier Portal (component: Internal Operations) in Oracle E-Business Suite versions 12.2.3–12.2.15 is affected. A difficult-to-exploit, unauthenticated HTTP attack can compromise confidentiality and integrity (CVSS 7.4 HIGH, C:H/I:H). No in-the-wild exploitation is reported. Patch detail...

CVE-2026-70775

A low-privileged, network-based attacker can exploit the User Interface component in Oracle E-Business Suite versions 12.2.3–12.2.15 to gain unauthorized read, write, and partial denial-of-service access to Installed Base data (CVSS 6.3 Medium). Oracle's August 2026 CPU advisory is the primary re...

CVE-2026-70775

...

CVE-2026-70776

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) has a low-severity, hard-to-exploit integrity flaw exploitable via HTTP by a low-privileged attacker requiring human interaction. Impact is limited to unauthorized update/insert/delete of some accessible data; no exploit code is p...

CVE-2026-70770

Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Warehouse...