32930 matches found
CVE-2026-70787
Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) has an easily exploitable HTTP-based flaw allowing low-privilege network attackers to fully compromise the server (CVSS 8.8 HIGH, all CIA impacts). No in-the-wild exploitation is reported. Oracle's August 2026 security alert (http...
CVE-2026-70785
Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) has a low-severity vulnerability exploitable via HTTP by an unauthenticated network attacker with high attack complexity, enabling unauthorized read access to a subset of application data. No exploitation evidence or patch details...
CVE-2026-70784
Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) has a medium-severity (CVSS 5.3) local vulnerability requiring high complexity and low privileges, allowing unauthorized data modification and partial read access. No exploitation or patch details are provided; monitoring Oracle's...
CVE-2026-70782
...
CVE-2026-70778
CVE-2026-70778 affects Oracle Customer Care (Internal Operations component) in Oracle E-Business Suite versions 12.2.3-12.2.15. A low-privileged attacker with network HTTP access can trigger unauthorized creation, deletion, or modification of critical data, with scope change potentially impacting...
CVE-2026-70777
Oracle iSupplier Portal (component Internal Operations) in E-Business Suite 12.2.3–12.2.15 has an easily exploitable, unauthenticated network vulnerability (CVSS 7.5) allowing full disclosure of all accessible data. Oracle's August 2026 CPU advisory (https://www.oracle.com/security-alerts/cspuaug...
CVE-2026-70774
CVE-2026-70774 affects the Oracle Warehouse Management component (Internal Operations) of Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to perform unauthorized creation, deletion, or modification o...
CVE-2026-70774
...
CVE-2026-70776
Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) has a low-severity, hard-to-exploit integrity flaw exploitable via HTTP by a low-privileged attacker requiring human interaction. Impact is limited to unauthorized update/insert/delete of some accessible data; no exploit code is p...
CVE-2026-70773
A HIGH severity (CVSS 8.2) vulnerability in Oracle E-Business Suite's Knowledge Integration component (versions 12.2.3–12.2.15) allows unauthenticated remote attackers via HTTP to read critical data and perform unauthorized update/insert/delete operations. Oracle has released patches in the Augus...
CVE-2026-70772
...
CVE-2026-70773
...
CVE-2026-70770
...
CVE-2026-70767
Oracle Hyperion Financial Reporting Server version 11.2.25.0.000 has an easily exploitable flaw allowing a low-privileged network attacker via HTTP to gain unauthorized access to critical or all product data (CVSS 6.5, confidentiality-only impact). No root cause or in-the-wild exploitation detail...
CVE-2026-70765
...
CVE-2026-70761
CVE-2026-70761 affects the Oracle Risk Management product (component: Internal Operations) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability without user interaction to achieve full takeover of ...
CVE-2026-70761
...
CVE-2026-70763
A HIGH-severity vulnerability in Oracle E-Business Suite (component: Daily Business Intelligence), affecting versions 12.2.3–12.2.15, allows a low-privileged attacker via HTTP to compromise the application with full C/I/A impact. No specific root cause or exploit details are provided; Oracle's Au...