1883 matches found
CVE-2026-70727
Oracle Helidon 3.2.18's Imperative Web Server component has a network-exploitable vulnerability (CVSS 5.3) allowing unauthenticated attackers to read a subset of accessible data via HTTPS. Details are in Oracle's August 2026 CPU advisory; monitor for the patch release and upgrade to the fixed ver...
CVE-2026-70722
CVE-2026-70722 affects Oracle E-Business Suite (Advanced Inbound Telephony, Internal Operations) versions 12.2.3-12.2.15, exploitable over HTTPS by an unauthenticated attacker. CVSS 8.2 (HIGH) yields unauthorized data modification/deletion and partial DoS. Oracle's August 2026 CPU advisory (cspua...
CVE-2026-70717
CVE-2026-70717 affects Oracle Autonomous Health Framework's Cluster Health Analyzer component (versions 26.1.0, 26.2.0, 26.3.1, 26.5.0, 26.5.2). A low-privileged attacker with physical segment access can compromise the framework with scope-change impact to other products, causing unauthorized dat...
CVE-2026-70702
...
CVE-2026-70696
Oracle Payments (component: File Transmission) in Oracle E-Business Suite versions 12.2.3–12.2.15 is vulnerable to an unauthenticated, network-based TCP attack (CVSS 7.5 HIGH). Successful exploitation grants unauthorized access to critical data or full Oracle Payments dataset, impacting confident...
CVE-2026-62638
Oracle Reports Developer 14.1.2.0.0 (Security and Authentication component) has a critical CVSS 9.1 flaw: unauthenticated remote attackers via HTTP can modify/delete data and crash the service (complete DoS). No exploit details provided. Patch status is not specified in the documents. Monitor Ora...
CVE-2026-62584
...
CVE-2026-62582
Oracle Hyperion Calculation Manager 11.2.25.0.000 has a critical Security-component flaw (CVSS 9.6) exploitable via HTTP by low-privileged attackers, enabling unauthorized data access and modification with scope change to other products. No exploit code is available. Apply the Oracle August 2026 ...
CVE-2026-62500
The Common Events component of Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 is vulnerable to a network-accessible flaw exploitable by a low-privileged attacker via HTTP, enabling full system takeover with CVSS 3.1 score 8.8 (HIGH). Oracle's August 2026 CPU advisory addresses th...
CVE-2026-61308
...
CVE-2026-61248
...
CVE-2026-60991
Oracle Identity Manager Connector (Core component, versions 12.2.1.4.0 and 14.1.2.1.0) has an easily exploitable local vulnerability allowing low-privileged attackers to fully compromise the product; Oracle's August 2026 CPU addresses it — apply patches from https://www.oracle.com/security-alerts...
CVE-2026-60413
CVE-2026-60413 affects Oracle Outside In Core (version 8.5.8) in Oracle Fusion Middleware. A local, unauthenticated attacker with infrastructure access can exploit it (CVSS 7.8 HIGH, C/I/A all high), requiring human interaction, potentially leading to full product takeover. No exploitation eviden...
CVE-2026-73356
creationtimestamp| type| source ---|---|--- 2026-08-18 18:09:37+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mtesscgqlf26...
CVE-2026-75913
creationtimestamp| type| source ---|---|--- 2026-08-18 16:21:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jirpv6fp43oyf 2026-08-18 17:01:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mteoxzg7ji26...
CVE-2026-73355
creationtimestamp| type| source ---|---|--- 2026-08-18 16:09:42+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtem3t2qux2c 2026-08-18 17:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtephsq4vg2f 2026-08-21 04:00:04+00:00| seen|...
CVE-2026-32474
creationtimestamp| type| source ---|---|--- 2026-08-18 16:08:35+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtelzuzwln23 2026-08-18 17:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mteqllljvl23...
MINI-WG8Q-8V8M-XJ6G
Bulletin has no description...