CVE-2026-70937

A HIGH-severity flaw in Oracle Hyperion Financial Management 11.2.25.0.000 Security component allows a low-privileged, network-authenticated attacker via HTTP to achieve full product compromise (confidentiality, integrity, availability). No exploitation evidence is provided; Oracle's August 2026 ...

CVE-2026-70930

A HIGH-severity vulnerability affects the Product Diagnostic Tools component of Oracle E-Business Suite Order Management, versions 12.2.3 through 12.2.15. A low-privileged attacker with network HTTP access can exploit it (high attack complexity) to achieve full compromise of Oracle Order Manageme...

CVE-2026-70919

Oracle Hyperion Financial Management 11.2.25.0.000 has a Security component flaw requiring local infrastructure access, high complexity, and human interaction; successful exploitation grants unauthorized update/insert/delete access to application data. No exploit details provided. Patch status no...

CVE-2026-70895

...

CVE-2026-70874

Oracle Hyperion Data Relationship Management version 11.2.25.0.000 has an easily exploitable flaw in its Access and security component. A low-privileged attacker with network HTTP access can achieve full compromise (confidentiality, integrity, availability). Oracle's August 2026 CPU provides the ...

CVE-2026-70826

Oracle Hyperion Financial Management 11.2.25.0.000 has an easily exploitable security component flaw. A low-privileged attacker with network HTTP access can obtain unauthorized access to critical data. CVSS 3.1 score is 6.5 (MEDIUM), with high confidentiality impact. No exploits are currently kno...

CVE-2026-70768

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) has a medium-severity (CVSS 6.1) HTTP-based vulnerability exploitable by unauthenticated attackers, enabling unauthorized read/write access to data with scope change; no exploitation details are provided. Oracle's August 2026 CPU ...

CVE-2026-70708

The Security API component of Oracle E-Business Suite Sales Foundation (versions 12.2.3–12.2.15) has a HIGH severity (CVSS 8.1) flaw allowing low-privileged, unauthenticated network attackers to create, delete, or modify critical data and gain full data access. No exploitation evidence is provide...

CVE-2026-75877

creationtimestamp| type| source ---|---|--- 2026-08-18 21:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtf4eurikp22 2026-08-20 03:00:03+00:00| published-proof-of-concept| Telegram/TXByhyAHALLjU76evu5RVvsn4zpzLoBf6fuRONOvcY2o 2026-08-21 00:00:11+00:00|...

CVE-2026-62592

...

CVE-2026-62569

...

CVE-2026-62471

Oracle Hyperion Infrastructure Technology 11.2.25.0.000 has a HIGH-severity (CVSS 8.1) flaw in its Common Events component. An unauthenticated remote attacker can exploit it via HTTP to fully compromise the application (confidentiality, integrity, availability). No exploitation details or patch v...

CVE-2026-61258

Affected : Oracle Internet Directory OID LDAP Server component in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.1.0. Cause : unspecified; classified as "easily exploitable." Impact : unauthenticated network attacker via LDAP can fully compromise the directory (C:H/I:H/A:H, CVSS 9.8 Crit...

CVE-2026-61265

...

CVE-2026-61212

CVE-2026-61212 is a vulnerability in the Runtime Tools component of Oracle WebCenter Portal (Oracle Fusion Middleware), affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve full takeover of Oracle WebCenter...

CVE-2026-61213

Oracle WebCenter Portal Runtime Tools in versions 12.2.1.4.0 and 14.1.2.0.0 is vulnerable to a network-based, low-complexity attack requiring only low privileges, enabling full system compromise (CVSS 8.8). No exploitation details are provided in the documents; Oracle's August 2026 CPU advisory i...

CVE-2026-61029

Oracle WebCenter Sites (component: WebCenter Sites) in Fusion Middleware versions 12.2.1.4.0 and 14.1.2.0.0 is vulnerable to a network-based attack. An unauthenticated remote attacker can compromise the application, potentially impacting additional products (scope change), with CVSS 9.0 critical ...

CVE-2026-60976

...

CVE-2026-60921

...

CVE-2026-60853

CVE-2026-60853 affects Helidon (Oracle Fusion Middleware), specifically the Imperative Web Server component, in supported version 3.2.20 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability, though it is rated as difficult to exploit (high attack complexity). ...