30921 matches found
CVE-2026-71099
Oracle Business Intelligence Enterprise Edition 26.01.0.0.0 (Analytics Web Answers component) has an easily exploitable vulnerability allowing a high-privileged network attacker via HTTP to fully compromise the application (CVSS 7.2, HIGH). Patch details are in Oracle's August 2026 CPU advisory; ...
CVE-2026-71100
CVE-2026-71100 affects Oracle Database Server's RDBMS component across versions 19.3-19.32, 21.3-21.23, and 23.4.0-23.26.3. An unauthenticated attacker with network access via Oracle Net can exploit it to read a subset of database data. CVSS 3.1 score is 5.3 (MEDIUM). Oracle's August 2026 CPU adv...
CVE-2026-71097
...
CVE-2026-71090
Oracle Hyperion Financial Management version 11.2.25.0.000 has a Security component vulnerability exploitable via HTTP by a low-privileged attacker, enabling DoS crashes, unauthorized data read, and limited update/delete access; CVSS 6.4 MEDIUM. No exploit details or patch version provided; monit...
CVE-2026-71089
Oracle Agile PLM MCAD Connector CAX Client version 3.6 is vulnerable: an unauthenticated attacker with local infrastructure access can exploit it (low complexity, human interaction required) to gain unauthorized read access to a subset of accessible data. CVSS 3.3 LOW; no exploitation observed. O...
CVE-2026-71087
Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain component: CAX Client. The supported version that is affected is 3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM MCAD Connector...
CVE-2026-71079
...
CVE-2026-71079
Oracle MySQL Connector/ODBC 26.7.0 is affected by a network-accessible DoS vulnerability exploitable by low-privileged attackers, causing hangs or crashes with no confidentiality or integrity impact (CVSS 3.1:6.5, availability-only). No exploitation details provided; monitor Oracle's August 2026 ...
CVE-2026-71078
Oracle Agile PLM MCAD Connector (component: CAX Client, version 3.6) has a local privilege escalation vulnerability requiring low privileges, high attack complexity, and human interaction. Successful exploitation yields unauthorized read/write/delete access to a subset of data and partial DoS. CV...
CVE-2026-71078
...
CVE-2026-71075
Affected product is Oracle Agile PLM MCAD Connector (CAX Client) version 3.6. Attack requires physical network-segment access and is rated MEDIUM (CVSS 5.9). Impact: unauthorized data access and limited data modification. Oracle's August 2026 CPU patch is referenced; no exploit code or in-the-wil...
CVE-2026-71076
...
CVE-2026-71067
Affected: Oracle Agile PLM MCAD Connector v3.6 (CAX Client component). Root cause: Not specified in the documents. Impact: CVSS 8.8 (High) — a low-privileged, network-reachable attacker via HTTP can achieve full compromise (confidentiality, integrity, availability) and takeover of the connector. ...
CVE-2026-71050
...
CVE-2026-71046
...
CVE-2026-71048
...
CVE-2026-71043
Oracle Agile PLM 9.3.6 (Security component) has an unauthenticated, network-reachable flaw exploitable via HTTP. CVSS 3.1 scores it HIGH (7.5, C:H), allowing unauthorized access to critical or all accessible data. No exploitation or patch details are provided; see Oracle's August 2026 CPU advisor...
CVE-2026-71044
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Export. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this...