CVE-2026-70811

CVE-2026-70811 affects the Oracle Purchasing product (component: Internal Operations ) of Oracle E-Business Suite , versions 12.2.5 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability without user interaction to perform unauthorized creation, de...

CVE-2026-70809

...

CVE-2026-70810

...

CVE-2026-70807

A high-severity (CVSS 8.5) vulnerability in Oracle E-Business Suite's Call Center Technology component (Internal Operations) affects versions 12.2.3–12.2.15. A low-privileged attacker with network access via HTTP can read critical data and modify or delete some accessible data. Exploitation detai...

CVE-2026-70800

High-privileged local attacker can compromise Oracle SDP Number Portability (component: Internal Operations) in EBS 12.2.3–12.2.15, causing unauthorized data modification, partial data read, and partial DoS. CVSS 7.3 HIGH; no exploit/in-the-wild activity reported. Oracle's August 2026 CPU provide...

CVE-2026-70799

Oracle SDP Number Portability (component: Internal Operations) in Oracle E-Business Suite versions 12.2.3-12.2.15 is vulnerable to an easily exploitable flaw allowing unauthenticated remote attackers via HTTP to gain unauthorized access to all accessible data. CVSS 3.1 scores 7.5 (HIGH), with con...

CVE-2026-70797

...

CVE-2026-70794

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) contains a local integrity vulnerability; a low-privileged local attacker can modify or delete critical data. CVSS 3.1 scores 4.7 (Medium). Exploitation requires local infrastructure access; no exploit details are provided. Apply ...

CVE-2026-70795

...

CVE-2026-70793

...

CVE-2026-70792

...

CVE-2026-70793

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) has a network-accessible vulnerability exploitable by low-privileged attackers via HTTP, enabling unauthorized data read, insert, update, and delete. CVSS 3.1 scores 4.2 (Medium). No exploitation details or patches are provided in...

CVE-2026-70792

A vulnerability in the Internal Operations component of Oracle Yard Management (Oracle E-Business Suite, versions 12.2.3–12.2.15) allows a low-privileged attacker with network HTTP access to compromise the application, with successful exploitation enabling full takeover (CVSS 3.1 base score 8.8, ...

CVE-2026-70790

Oracle E-Business Suite's Telecommunications Billing Integrator (component: Internal Operations), versions 12.2.3–12.2.15, is affected by an easily exploitable, unauthenticated network-based flaw requiring user interaction that allows unauthorized integrity compromise of all accessible data; no p...

CVE-2026-70789

...

CVE-2026-70787

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) has an easily exploitable HTTP-based flaw allowing low-privilege network attackers to fully compromise the server (CVSS 8.8 HIGH, all CIA impacts). No in-the-wild exploitation is reported. Oracle's August 2026 security alert (http...

CVE-2026-70785

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) has a low-severity vulnerability exploitable via HTTP by an unauthenticated network attacker with high attack complexity, enabling unauthorized read access to a subset of application data. No exploitation evidence or patch details...

CVE-2026-70784

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) has a medium-severity (CVSS 5.3) local vulnerability requiring high complexity and low privileges, allowing unauthorized data modification and partial read access. No exploitation or patch details are provided; monitoring Oracle's...

CVE-2026-70782

...

CVE-2026-70778

CVE-2026-70778 affects Oracle Customer Care (Internal Operations component) in Oracle E-Business Suite versions 12.2.3-12.2.15. A low-privileged attacker with network HTTP access can trigger unauthorized creation, deletion, or modification of critical data, with scope change potentially impacting...