CVE-2026-70987

Oracle Commerce 11.4.0's Content Acquisition System component allows unauthenticated remote attackers via HTTP to access critical data (CVSS 7.5 HIGH, confidentiality-only). Oracle has issued updates; see https://www.oracle.com/security-alerts/cspuaug2026.html. Exploitation details are not provid...

CVE-2026-70985

Oracle Commerce 11.4.0 Content Acquisition System allows unauthenticated, network-based HTTP attacks causing high confidentiality impact (CVSS 7.5). Oracle's August 2026 CPU advisory addresses it; no exploit or root-cause details are provided in the documents.

CVE-2026-70981

Oracle Commerce 11.4.0 Content Acquisition System is affected by a critical (CVSS 9.1) unauthenticated network-based vulnerability enabling unauthorized data modification and denial of service. No exploitation details are provided; refer to Oracle's August 2026 security alert for patch information.

CVE-2026-70972

...

CVE-2026-70973

...

CVE-2026-70970

...

CVE-2026-70971

Oracle Hyperion Infrastructure Technology 11.2.25.0.000 (Installation and Configuration component) has a network-reachable vulnerability allowing a low-privileged attacker to gain unauthorized access to critical data and modify some data. CVSS 7.1 (HIGH). No exploit details provided; remediation ...

CVE-2026-70967

...

CVE-2026-70968

...

CVE-2026-70965

...

CVE-2026-70963

Oracle Hyperion Infrastructure Technology (version 11.2.25.0.000, Installation and Configuration component) is vulnerable to a network-accessible attack requiring low privileges. A successful exploit yields unauthorized read and write access to a subset of data. CVSS 4.2 (Medium) reflects high at...

CVE-2026-70960

...

CVE-2026-70960

Oracle Hyperion Financial Management 11.2.25.0.000 has a HIGH-severity (CVSS 7.6) Security component flaw exploitable over HTTP by a low-privileged attacker, enabling unauthorized data access and modification with scope change. Oracle's August 2026 CPU patch is the remediation. No in-the-wild exp...

CVE-2026-70959

...

CVE-2026-70957

Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) at version 11.2.25.0.000 has a HIGH-severity (CVSS 8.1) flaw: a low-privileged network attacker via HTTP can gain unauthorized read/write access to critical application data. No exploit or patch details are prov...

CVE-2026-70955

...

CVE-2026-70951

...

CVE-2026-70952

Oracle Hyperion Financial Management version 11.2.25.0.000 is affected by a HIGH-severity (CVSS 3.1 base score 8.2) vulnerability in its Security component. An unauthenticated attacker with network access via HTTP can exploit it to gain unauthorized access to critical or all product data and caus...

CVE-2026-70950

Oracle Hyperion Financial Management Security component (version 11.2.25.0.000) has an easily exploitable HIGH-severity flaw (CVSS 7.2) allowing a high-privileged network attacker via HTTP to achieve full system takeover with high confidentiality, integrity, and availability impact. No exploitati...

CVE-2026-70949

Affected: Oracle Siebel CRM Server Infrastructure, versions 17.0–26.6. Easily exploitable via HTTP by low-privileged network attacker, enabling full deployment takeover (CVSS 8.8 HIGH, C/I/A all HIGH). Oracle published patches in the August 2026 CPU advisory; no exploitation details are provided ...