288283 matches found
EUVD-2026-79867
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SQL to compromise Oracle Hyperion Financial...
CVE-2026-87212
Oracle Hyperion Financial Management version 11.2.26.0.000 is affected by a vulnerability in its Security component, exploitable over the network via SQL by an unauthenticated attacker. The vulnerability is rated difficult to exploit (high attack complexity) but, when successful, allows unauthori...
CVE-2026-87207
Oracle Hyperion Financial Management (component: Security , version 11.2.26.0.000 ) is affected by an easily exploitable vulnerability reachable via network access through SQL . A high-privileged attacker requires no user interaction to exploit it, resulting in full takeover of the product. The C...
EUVD-2026-79862
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via SQL to compromise Oracle Hyperion Financial...
CVE-2026-87202
Oracle Hyperion Financial Management (component: Security ), version 11.2.26.0.000 , is affected by an easily exploitable vulnerability. A low-privileged attacker with network access via SQL can compromise the application with low complexity and no user interaction, leading to full takeover of th...
EUVD-2026-79857
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Oracle Hyperion Financial...
CVE-2026-87184
Oracle Hyperion Financial Management (component: Security ) in supported version 11.2.26.0.000 is affected by an easily exploitable vulnerability that allows an unauthenticated attacker with network access via SQL to fully compromise the product. Successful exploitation results in takeover with h...
EUVD-2026-79839
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via SQL to compromise Oracle Hyperion Financial...
EUVD-2026-79833
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via SQL to compromise Oracle Hyperion Financial...
CVE-2026-87178
CVE-2026-87178 affects the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000 . An easily exploitable vulnerability allows a high-privileged attacker with network access via SQL to compromise the product. The attack has a scope change , meaning it may significantly i...
CVE-2026-83210
Oracle Siebel CRM (Server Infrastructure component) is affected by a SQL-injection-style vulnerability in the Siebel CRM Deployment product, impacting supported versions 17.0 through 26.7 . A low-privileged attacker with network access via SQL can exploit this with low complexity and no user inte...
EUVD-2026-79562
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Server Infrastructure. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Siebel CRM Deployment. Successful...
EUVD-2026-79560
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Migration. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Siebel CRM Deployment. Successful attacks of...
CVE-2026-83208
Oracle Siebel CRM Deployment (component: Migration ) is affected by a vulnerability in supported versions 17.0–26.7 . A low-privileged attacker with network access via SQL can exploit this with low complexity to achieve takeover of the Siebel CRM Deployment component, resulting in high impact to ...
EUVD-2026-79534
Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM component: Configuration Tools. Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows low privileged attacker with network access via SQL to compromise Siebel CRM Development. Successf...
CVE-2026-83182
CVE-2026-83182 affects the Configuration Tools component of Oracle Siebel CRM Development , versions 17.0 through 26.7 . A low-privileged attacker with network access via SQL can exploit this vulnerability to achieve full takeover of the Siebel CRM Development component, resulting in high impact ...
CVE-2026-32599
Netmaker makes networks with WireGuard. Prior to version 1.5.0, the "sqliteDeleteRecord" function in Netmaker's database layer constructs SQL "DELETE" statements using direct string concatenation of user-supplied input. This allows an authenticated attacker to perform boolean-based SQL injection...
EUVD-2026-79502
Netmaker makes networks with WireGuard. Prior to version 1.5.0, the sqliteDeleteRecord function in Netmaker's database layer constructs SQL DELETE statements using direct string concatenation of user-supplied input. This allows an authenticated attacker to perform boolean-based SQL injection...
CVE-2026-32599
Netmaker (a WireGuard network manager) is vulnerable to boolean-based SQL injection in its SQLite database layer. Prior to version 1.5.0 , the sqliteDeleteRecord function builds SQL DELETE statements via direct string concatenation of user-supplied input from the DELETE /api/dns/{network}/{domain...
CVE-2026-32599 Netmaker has a boolean‑based SQL Injection
Netmaker makes networks with WireGuard. Prior to version 1.5.0, the sqliteDeleteRecord function in Netmaker's database layer constructs SQL DELETE statements using direct string concatenation of user-supplied input. This allows an authenticated attacker to perform boolean-based SQL injection...