CVE-2026-70768

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) has a medium-severity (CVSS 6.1) HTTP-based vulnerability exploitable by unauthenticated attackers, enabling unauthorized read/write access to data with scope change; no exploitation details are provided. Oracle's August 2026 CPU ...

CVE-2026-70770

...

CVE-2026-70765

...

CVE-2026-70754

...

CVE-2026-70752

...

CVE-2026-70754

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) is affected by an easily exploitable, unauthenticated HTTP-based vulnerability allowing unauthorized read access to a subset of accessible data; CVSS 3.1 Base Score 5.3 (MEDIUM). Oracle's August 2026 Critical Patch Update addresse...

CVE-2026-70749

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) has a HIGH-severity (CVSS 8.1) unauthenticated remote vulnerability exploitable via HTTP. A network-accessible attacker can compromise the product, with full confidentiality, integrity, and availability impact. No specific root ca...

CVE-2026-70734

...

CVE-2026-70726

CVE-2026-70726 affects the Internal Operations component of Oracle Cash Management in E-Business Suite versions 12.2.3 through 12.2.15. A high-privileged local attacker can modify or access all Cash Management data (CVSS 6.0, Medium). Oracle released patches in its August 2026 Critical Patch Upda...

CVE-2026-70722

...

CVE-2026-70717

CVE-2026-70717 affects Oracle Autonomous Health Framework's Cluster Health Analyzer component (versions 26.1.0, 26.2.0, 26.3.1, 26.5.0, 26.5.2). A low-privileged attacker with physical segment access can compromise the framework with scope-change impact to other products, causing unauthorized dat...

CVE-2026-70714

...

CVE-2026-70710

...

CVE-2026-70708

The Security API component of Oracle E-Business Suite Sales Foundation (versions 12.2.3–12.2.15) has a HIGH severity (CVSS 8.1) flaw allowing low-privileged, unauthenticated network attackers to create, delete, or modify critical data and gain full data access. No exploitation evidence is provide...

CVE-2026-70703

...

CVE-2026-70704

Oracle E-Business Suite 12.2.3–12.2.15 Party Search UI has a HIGH-severity (CVSS 8.1) flaw exploitable over HTTP by unauthenticated attackers, enabling full compromise of the Trading Community component. No exploitation evidence is provided. Patch details: Oracle CSP August 2026 advisory. Monitor...

CVE-2026-70700

CVE-2026-70700 affects the Oracle Payables product of Oracle E-Business Suite (component: Internal Operations ), versions 12.2.3 through 12.2.15 . An unauthenticated attacker with network access via HTTP can trigger a hang or frequently repeatable crash, resulting in a complete denial of service ...

CVE-2026-70702

...

CVE-2026-75877

creationtimestamp| type| source ---|---|--- 2026-08-18 21:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtf4eurikp22 2026-08-20 03:00:03+00:00| published-proof-of-concept| Telegram/TXByhyAHALLjU76evu5RVvsn4zpzLoBf6fuRONOvcY2o 2026-08-21 00:00:11+00:00|...

CVE-2026-70696

Oracle Payments (component: File Transmission) in Oracle E-Business Suite versions 12.2.3–12.2.15 is vulnerable to an unauthenticated, network-based TCP attack (CVSS 7.5 HIGH). Successful exploitation grants unauthorized access to critical data or full Oracle Payments dataset, impacting confident...