32923 matches found
CVE-2026-70859
Oracle Siebel CRM Integration (REST component) is vulnerable in versions 17.0–26.6 . A low-privilege network attacker can exploit this via HTTP with high attack complexity to achieve full takeover of the product, with a scope change meaning additional products may be impacted. The CVSS 3.1 score ...
CVE-2026-70857
...
CVE-2026-70852
...
CVE-2026-70845
Oracle E-Business Suite 12.2.3-12.2.15's Loans product, Internal Operations component, allows a low-privileged remote attacker via HTTP to create, delete, or modify critical Loans data and cause partial denial of service (CVSS 7.1 HIGH). Oracle's August 2026 CPU advisory is the remediation source.
CVE-2026-70840
...
CVE-2026-70839
CVE-2026-70839 affects the Oracle Financials for EMEA product (component: Internal Operations ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability without user interaction to gain unauthorized access t...
CVE-2026-70840
A HIGH-severity (CVSS 8.4) flaw exists in Oracle Hyperion Financial Management's Security component, affecting version 11.2.25.0.000. An attacker with low privileges and local access can exploit it to gain unauthorized read/write access to all accessible HFM data, with scope extending beyond the ...
CVE-2026-70831
...
CVE-2026-70828
...
CVE-2026-70827
...
CVE-2026-70829
...
CVE-2026-70818
...
CVE-2026-70820
...
CVE-2026-70819
...
CVE-2026-70818
Oracle Hyperion Financial Management version 11.2.25.0.000 contains a HIGH-severity (CVSS 8.8) SQL-based Security component flaw. A low-privileged, network-accessible attacker can exploit it to fully compromise CIA triad — leading to application takeover. No exploitation evidence or patch details...
CVE-2026-70821
...
CVE-2026-70812
A HIGH-severity vulnerability (CVSS 8.8) affects Oracle Call Center Technology within Oracle E-Business Suite, component "Internal Operations," in versions 12.2.3 through 12.2.15. An unauthenticated-to-low-privileged attacker with HTTP network access can exploit it to fully compromise the product...
CVE-2026-70814
...
CVE-2026-70811
CVE-2026-70811 affects the Oracle Purchasing product (component: Internal Operations ) of Oracle E-Business Suite , versions 12.2.5 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability without user interaction to perform unauthorized creation, de...