CVE-2026-73934

Helidon 3.2.19's Imperative Web Server component is vulnerable to an unauthenticated HTTP/2 attack causing denial of service via hang or crash (CVSS 7.5). No exploitation details are provided. Affected organizations should apply patches from Oracle's August 2026 CPU advisory.

CVE-2026-73897

...

CVE-2026-73880

...

CVE-2026-73881

Oracle's Helidon 4.5.0 (Imperative Web Server component) is vulnerable to an easily exploitable HTTP-based attack requiring low privileges, allowing unauthorized read, insert, update, and delete access to Helidon data. Oracle's August 2026 CPU advisory (cspuaug2026.html) is the primary reference;...

CVE-2026-71128

...

CVE-2026-71091

Oracle Hyperion Financial Management 11.2.25.0.000 has an easily exploitable SQL-based vulnerability in the Security component, allowing a high-privileged remote attacker to achieve unauthorized read and write access to critical data (CVSS 6.5, Medium). No patch version or remediation is specifie...

CVE-2026-71035

...

CVE-2026-71022

...

CVE-2026-71013

Oracle Hyperion Financial Management 11.2.25.0.000 has a Security component vulnerability exploitable locally by a high-privileged attacker, enabling unauthorized data creation, deletion, modification, and full data access (CVSS 6.0). No exploitation details are provided; see Oracle's August 2026...

CVE-2026-70995

...

CVE-2026-70981

Oracle Commerce 11.4.0 Content Acquisition System is affected by a critical (CVSS 9.1) unauthenticated network-based vulnerability enabling unauthorized data modification and denial of service. No exploitation details are provided; refer to Oracle's August 2026 security alert for patch information.

CVE-2026-70971

...

CVE-2026-70967

...

CVE-2026-70954

Oracle Commerce Platform 11.4.0 (Dynamo Application Framework) has a critical remotely exploitable flaw: an unauthenticated attacker via HTTP can achieve full platform compromise (CVSS 9.8). Oracle's August 2026 CPU provides remediation; no in-the-wild exploitation details are provided in the doc...

CVE-2026-70951

CVE-2026-70951 affects the Document Management component of Oracle Siebel CRM End User (versions 17.0–26.6 ). A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to achieve full takeover of the application, impacting co...

CVE-2026-70916

The Security component of Oracle Hyperion Financial Management version 11.2.25.0.000 is affected. An unauthenticated attacker with local infrastructure access can gain unauthorized read access to a subset of application data. CVSS 3.1 score 4.0 (Medium). Oracle's August 2026 CPU advisory is the p...

CVE-2026-70832

CVE-2026-70832 affects the Security component of Oracle Hyperion Financial Management version 11.2.25.0.000 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data or complete access to all data accessible through the ...

CVE-2026-70795

The Valid Session component in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is vulnerable. An unauthenticated remote attacker using Oracle Net can exploit this with high attack complexity, achieving full compromise (confidentiality, integrity, availability) — CVSS 3.1 base score 8.1 (H...

CVE-2026-70727

Oracle Helidon 3.2.18's Imperative Web Server component has a network-exploitable vulnerability (CVSS 5.3) allowing unauthenticated attackers to read a subset of accessible data via HTTPS. Details are in Oracle's August 2026 CPU advisory; monitor for the patch release and upgrade to the fixed ver...

CVE-2026-70722

CVE-2026-70722 affects Oracle E-Business Suite (Advanced Inbound Telephony, Internal Operations) versions 12.2.3-12.2.15, exploitable over HTTPS by an unauthenticated attacker. CVSS 8.2 (HIGH) yields unauthorized data modification/deletion and partial DoS. Oracle's August 2026 CPU advisory (cspua...