CVE-2026-70767

Oracle Hyperion Financial Reporting Server version 11.2.25.0.000 has an easily exploitable flaw allowing a low-privileged network attacker via HTTP to gain unauthorized access to critical or all product data (CVSS 6.5, confidentiality-only impact). No root cause or in-the-wild exploitation detail...

CVE-2026-70765

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) is vulnerable to an unauthenticated, low-complexity HTTP attack requiring human interaction. CVSS 3.1 scores it 6.1 (Medium) with scope change, enabling unauthorized read and update/insert/delete access to some product data. Explo...

CVE-2026-70766

An unauthenticated attacker can exploit the Server component of Oracle Hyperion Financial Reporting 11.2.25.0.000 via HTTP to gain unauthorized read and limited write/delete access to application data, requiring human interaction to succeed. Oracle's August 2026 security advisory is the primary r...

CVE-2026-70762

Vulnerability in the Oracle Risk Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Risk Management...

CVE-2026-70759

Oracle Hyperion Financial Reporting Server (affected version 11.2.25.0.000) has a medium-severity (CVSS 5.4) flaw exploitable via unauthenticated HTTP access, requiring user interaction, enabling unauthorized read, update, insert, and delete access to accessible data. Oracle's August 2026 securit...

CVE-2026-70760

Oracle EBS Order Management, component Product Diagnostic Tools, versions 12.2.3–12.2.15, is vulnerable to a network-based HTTP exploit by low-privileged attackers, causing unauthorized data access and modification with scope change (CVSS 7.1 HIGH). No in-the-wild exploitation reported. Patch via...

CVE-2026-70758

Oracle Hyperion Financial Reporting Server (v11.2.25.0.000) has a local privilege escalation vulnerability requiring low-privileged infrastructure access; successful exploitation allows unauthorized data creation, deletion, modification, and limited read access. Oracle's August 2026 CPU patch adv...

CVE-2026-70752

Oracle Hyperion Financial Reporting Server (v11.2.25.0.000) is vulnerable to an unauthenticated, network-based HTTP attack (CVSS 7.5 HIGH) that can expose critical or all accessible product data. Exploitation details are not provided; remediation guidance is in Oracle's August 2026 security alert...

CVE-2026-70753

A low-privileged, network-accessible attacker can exploit a flaw in the Server component of Oracle Hyperion Financial Reporting 11.2.25.0.000 via HTTP, requiring only user interaction, to read all accessible data and perform limited unauthorized updates. Oracle's August 2026 security advisory is ...

CVE-2026-70751

Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion component: Server. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial...

CVE-2026-70747

Oracle E-Business Suite 12.2.3–12.2.15 Customer Tab component allows low-privileged network attackers to take over Oracle Customers Online (CVSS 8.8 HIGH, full CIA impact). No root cause or fix details provided; monitor Oracle CPU updates for patches.

CVE-2026-70744

Oracle Hyperion Financial Reporting 11.2.25.0.000 Server component has a HIGH severity (CVSS 8.1) unauthenticated remote vulnerability exploitable via HTTP, potentially leading to full product compromise; no exploit or in-the-wild activity details are provided in the documents.

CVE-2026-70743

Oracle Hyperion Financial Reporting Server version 11.2.25.0.000 has an unauthenticated network-exploitable flaw (CVSS 8.2) allowing attackers to access all product data and cause partial denial of service. Oracle's August 2026 CPU advisory likely contains remediation guidance. No exploit details...

CVE-2026-70742

Oracle Hyperion Financial Reporting Server component (version 11.2.25.0.000) has an easily exploitable flaw exploitable over HTTPS by a low-privilege attacker, enabling full product takeover with HIGH confidentiality, integrity, and availability impact (CVSS 8.8). No in-the-wild exploitation data...

CVE-2026-70743

...

CVE-2026-70739

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) has a critical CVSS 9.8 flaw: an unauthenticated remote attacker via HTTP can fully compromise the application (confidentiality, integrity, availability). No root cause or patch version is specified in the provided documents; Orac...

CVE-2026-70737

Oracle Enterprise Manager for Systems Infrastructure, Storage Server Management component, versions 13.5 and 24.1, is vulnerable to a high-severity (CVSS 8.8) flaw: a low-privileged attacker with network HTTP access can fully compromise the product (confidentiality, integrity, and availability al...

CVE-2026-70736

Oracle Hyperion Profitability and Cost Management version 11.2.25.0.000 has an easily exploitable flaw in its Deployment component. A low-privileged attacker with HTTP network access can gain unauthorized read access to all product data and limited write access (insert/update/delete). CVSS 3.1 sc...

CVE-2026-70735

CVE-2026-70735 affects Oracle Hyperion Profitability and Cost Management version 11.2.25.0.000, specifically the Deployment component. A high-privileged attacker with network HTTP access can exploit this flaw to fully compromise the application (CVSS 7.2 HIGH, C/I/A impacts). No exploitation or i...

CVE-2026-70734

Oracle Autonomous Health Framework's Trace File Analyzer component (versions 26.1.0, 26.2.0, 26.3.1, 26.5.0, 26.5.2) is affected by a HIGH-severity (CVSS 7.4) local vulnerability requiring high privileges and user interaction. Successful exploitation permits unauthorized data modification/deletio...