CVE-2026-70778

CVE-2026-70778 affects Oracle Customer Care (Internal Operations component) in Oracle E-Business Suite versions 12.2.3-12.2.15. A low-privileged attacker with network HTTP access can trigger unauthorized creation, deletion, or modification of critical data, with scope change potentially impacting...

CVE-2026-70777

Oracle iSupplier Portal (component Internal Operations) in E-Business Suite 12.2.3–12.2.15 has an easily exploitable, unauthenticated network vulnerability (CVSS 7.5) allowing full disclosure of all accessible data. Oracle's August 2026 CPU advisory (https://www.oracle.com/security-alerts/cspuaug...

CVE-2026-70774

CVE-2026-70774 affects the Oracle Warehouse Management component (Internal Operations) of Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to perform unauthorized creation, deletion, or modification o...

CVE-2026-70774

...

CVE-2026-70776

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) has a low-severity, hard-to-exploit integrity flaw exploitable via HTTP by a low-privileged attacker requiring human interaction. Impact is limited to unauthorized update/insert/delete of some accessible data; no exploit code is p...

CVE-2026-70773

A HIGH severity (CVSS 8.2) vulnerability in Oracle E-Business Suite's Knowledge Integration component (versions 12.2.3–12.2.15) allows unauthenticated remote attackers via HTTP to read critical data and perform unauthorized update/insert/delete operations. Oracle has released patches in the Augus...

CVE-2026-70772

...

CVE-2026-70773

...

CVE-2026-70770

...

CVE-2026-70767

Oracle Hyperion Financial Reporting Server version 11.2.25.0.000 has an easily exploitable flaw allowing a low-privileged network attacker via HTTP to gain unauthorized access to critical or all product data (CVSS 6.5, confidentiality-only impact). No root cause or in-the-wild exploitation detail...

CVE-2026-70765

...

CVE-2026-70761

CVE-2026-70761 affects the Oracle Risk Management product (component: Internal Operations) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability without user interaction to achieve full takeover of ...

CVE-2026-70761

...

CVE-2026-70763

A HIGH-severity vulnerability in Oracle E-Business Suite (component: Daily Business Intelligence), affecting versions 12.2.3–12.2.15, allows a low-privileged attacker via HTTP to compromise the application with full C/I/A impact. No specific root cause or exploit details are provided; Oracle's Au...

CVE-2026-70752

...

CVE-2026-70754

...

CVE-2026-70753

A low-privileged, network-accessible attacker can exploit a flaw in the Server component of Oracle Hyperion Financial Reporting 11.2.25.0.000 via HTTP, requiring only user interaction, to read all accessible data and perform limited unauthorized updates. Oracle's August 2026 security advisory is ...

CVE-2026-70750

Oracle Hyperion Financial Reporting Server (affected version 11.2.25.0.000) is vulnerable to local privilege escalation; a low-privileged attacker with system access can achieve full product takeover (C/I/A impact, CVSS 7.8 High). No exploitation details provided; refer to Oracle's August 2026 se...

CVE-2026-70751

Oracle Hyperion Financial Reporting (Server component), version 11.2.25.0.000 , is affected by a vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the system. Exploitation is rated as difficult (high complexity) and requires user interaction from a p...

CVE-2026-70734

Oracle Autonomous Health Framework's Trace File Analyzer component (versions 26.1.0, 26.2.0, 26.3.1, 26.5.0, 26.5.2) is affected by a HIGH-severity (CVSS 7.4) local vulnerability requiring high privileges and user interaction. Successful exploitation permits unauthorized data modification/deletio...