CVE-2026-70696

Oracle Payments (component: File Transmission) in Oracle E-Business Suite versions 12.2.3–12.2.15 is vulnerable to an unauthenticated, network-based TCP attack (CVSS 7.5 HIGH). Successful exploitation grants unauthorized access to critical data or full Oracle Payments dataset, impacting confident...

CVE-2026-70691

...

CVE-2026-70690

...

CVE-2026-70685

Affected component: Oracle Hyperion Calculation Manager Security component, version 11.2.25.0.000. Root cause: unauthenticated attacker with local infrastructure access can compromise the application. Impact: high confidentiality breach and low integrity impact, with scope change affecting additi...

CVE-2026-70678

...

CVE-2026-70678

Oracle Hyperion Calculation Manager version 11.2.25.0.000 (Security component) is affected by a vulnerability allowing a low-privileged attacker with network access via HTTP to compromise the product. Successful exploitation requires user interaction from a person other than the attacker. Due to ...

CVE-2026-70679

...

CVE-2026-62626

Oracle Reports Developer 12.2.1.19.0 (component: Security and Authentication) is vulnerable to an unauthenticated, network-accessible HTTP exploit allowing full system takeover (CVSS 9.8). Oracle's August 2026 CPU addresses this; no public exploit code is documented. Organizations running affecte...

CVE-2026-62613

CVE-2026-62613 affects the Security and Authentication component of Oracle Reports Developer (Oracle Fusion Middleware), version 12.2.1.19.0 . An unauthenticated attacker with access to the adjacent network segment can exploit this vulnerability with low complexity to compromise the product. Due ...

CVE-2026-62603

Oracle Hyperion Calculation Manager 11.2.25.0.000's Security component is affected by a medium-severity flaw (CVSS 5.4). An unauthenticated attacker with physical access to the hardware's communication segment can gain unauthorized read and write access to some application data. Oracle's August 2...

CVE-2026-62594

...

CVE-2026-62592

...

CVE-2026-62588

...

CVE-2026-62584

...

CVE-2026-62583

The vulnerability affects Oracle Hyperion Infrastructure Technology version 11.2.25.0.000, specifically the Installation and Configuration component. CVSS 3.1 scores it LOW (3.0) requiring high privileges and local access; successful exploitation permits unauthorized data modification and partial...

CVE-2026-62571

Oracle Hyperion Calculation Manager (component: Security ) version 11.2.25.0.000 is affected by an easily exploitable vulnerability that allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data or complete access to all accessible data. The vulner...

CVE-2026-62569

...

CVE-2026-62555

The affected product is Oracle Hyperion Infrastructure Technology 11.2.25.0.000 (Installation and Configuration component). A high-privileged attacker with network SQL access can achieve unauthorized creation, deletion, or modification of all accessible data, with CVSS 3.1 base score 6.5 (Medium)...

CVE-2026-62554

Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 has an easily exploitable, unauthenticated HTTP-accessible vulnerability in its Installation and Configuration component, enabling unauthorized access to critical data (CVSS 7.5 HIGH). No patch or exploit details are provided; Oracle...

CVE-2026-62545

...