32923 matches found
CVE-2026-70892
Affected product: Oracle Hyperion Data Relationship Management version 11.2.25.0.000, component "Access and security." Root cause: unspecified, described as "difficult to exploit." Impact: CVSS 8.2 (High) — low-privileged network attacker can gain unauthorized read/write access to critical data w...
CVE-2026-70890
Oracle Hyperion DRM 11.2.25.0.000 has an unauthenticated, easily exploitable HTTP access-and-security flaw (CVSS 7.5) allowing full confidentiality compromise; Oracle's August 2026 CPU advisory is referenced, but no patch or exploit details are provided in the documents.
CVE-2026-70885
Oracle Hyperion Data Relationship Management 11.2.25.0.000 has a HIGH-severity (CVSS 8.5) access and security flaw exploitable via HTTP by a low-privileged attacker, potentially causing product takeover and scope change. No exploit or patch details are provided; monitor Oracle's August 2026 CPU f...
CVE-2026-70887
...
CVE-2026-70884
...
CVE-2026-70882
...
CVE-2026-70883
Oracle Hyperion Data Relationship Management version 11.2.25.0.000 has a critical (CVSS 9.1) flaw in its Access and security component. An unauthenticated remote attacker over HTTP can gain unauthorized read/write access to all application data. Exploitation details are not provided; apply the Or...
CVE-2026-70880
Oracle Hyperion Data Relationship Management 11.2.25.0.000 has a critical flaw in its Access and security component. Unauthenticated attackers with network TCP access can fully compromise the application (CVSS 10.0), with potential scope change affecting additional products. Oracle's August 2026 ...
CVE-2026-70880
...
CVE-2026-70881
...
CVE-2026-70877
A CVSS 8.8 HIGH-severity flaw in Oracle Hyperion Data Relationship Management 11.2.25.0.000 (Access and security component) allows low-privileged, network-authenticated attackers via HTTP to fully compromise the application (C/H/I/A all High). Oracle's August 2026 CPU advisory is the patch refere...
CVE-2026-70873
...
CVE-2026-70874
Oracle Hyperion Data Relationship Management version 11.2.25.0.000 has an easily exploitable flaw in its Access and security component. A low-privileged attacker with network HTTP access can achieve full compromise (confidentiality, integrity, availability). Oracle's August 2026 CPU provides the ...
CVE-2026-70872
Oracle Hyperion Data Relationship Management (component: Access and security), version 11.2.25.0.000, is affected by an unauthenticated, network-reachable flaw (CVSS 9.1) enabling full confidentiality and integrity compromise of accessible data; no public exploit details are available. Patch guid...
CVE-2026-70872
...
CVE-2026-70867
Oracle Application Testing Suite 13.3.0.1 has an easily exploitable flaw allowing unauthenticated attackers on the adjacent physical network segment to compromise the system, achieving high confidentiality impact and low integrity impact. Patch details are not provided; refer to Oracle's August 2...
CVE-2026-70865
...
CVE-2026-70865
A network-accessible vulnerability in Oracle Application Testing Suite 13.3.0.1 allows a low-privileged attacker (with "Load Testing for Web Apps" privilege) over HTTPS to achieve full system takeover, with HIGH impacts across confidentiality, integrity, and availability (CVSS 7.5). Oracle has re...
CVE-2026-70861
Oracle PeopleSoft 9.1 (component: Common Objects Brazil) has an easily exploitable flaw reachable via T3 and IIOP protocols; a high-privileged network attacker can fully compromise the component (C/H/I/A), CVSS 7.2 High. No patch or exploit details are provided in the documents; monitor Oracle's ...