32991 matches found
CVE-2026-62615
...
CVE-2026-62613
CVE-2026-62613 affects the Security and Authentication component of Oracle Reports Developer (Oracle Fusion Middleware), version 12.2.1.19.0 . An unauthenticated attacker with access to the adjacent network segment can exploit this vulnerability with low complexity to compromise the product. Due ...
CVE-2026-62606
...
CVE-2026-62606
Oracle Hyperion Calculation Manager 11.2.25.0.000 Security component has a network-based vulnerability (CVSS 3.1, LOW) allowing low-privileged attackers to gain unauthorized read access to a subset of data. No exploit or patch details are provided; see Oracle's advisory: https://www.oracle.com/se...
CVE-2026-62603
Oracle Hyperion Calculation Manager 11.2.25.0.000's Security component is affected by a medium-severity flaw (CVSS 5.4). An unauthenticated attacker with physical access to the hardware's communication segment can gain unauthorized read and write access to some application data. Oracle's August 2...
CVE-2026-62591
Affected product: Oracle Siebel CRM Integration, component Open Integration, versions 25.12–26.6. Root cause: unspecified, but easily exploitable via unauthenticated HTTP. Impact: CVSS 8.1 HIGH — unauthorized read/write of all accessible critical data. Exploitation: not reported in the wild. Reme...
CVE-2026-62589
Oracle Siebel CRM's Open Integration component (versions 25.12-26.6) has a HIGH-severity (CVSS 8.7) flaw exploitable by an unauthenticated remote attacker over HTTP with high attack complexity, enabling unauthorized read/write access to critical data with scope change. CISA SSVC rates technical i...
CVE-2026-62588
...
CVE-2026-62583
The vulnerability affects Oracle Hyperion Infrastructure Technology version 11.2.25.0.000, specifically the Installation and Configuration component. CVSS 3.1 scores it LOW (3.0) requiring high privileges and local access; successful exploitation permits unauthorized data modification and partial...
CVE-2026-62566
CVE-2026-62566 affects Oracle Hyperion Infrastructure Technology version 11.2.25.0.000, in the Installation and Configuration component. An unauthenticated, network-accessible attacker can exploit it via HTTP to gain unauthorized read access to a subset of data, scoring CVSS 5.3 (Medium). Oracle'...
CVE-2026-62570
...
CVE-2026-62564
A local low-privileged attacker can exploit a flaw in the Installation and Configuration component of Oracle Hyperion Infrastructure Technology (affected version 11.2.25.0.000) to gain unauthorized access to all accessible data; CVSS 3.1 score 5.5 (MEDIUM), with high confidentiality impact only. ...
CVE-2026-62552
...
CVE-2026-62554
Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 has an easily exploitable, unauthenticated HTTP-accessible vulnerability in its Installation and Configuration component, enabling unauthorized access to critical data (CVSS 7.5 HIGH). No patch or exploit details are provided; Oracle...
CVE-2026-62554
...
CVE-2026-62545
...
CVE-2026-62543
...
CVE-2026-62540
...
CVE-2026-62539
A critical unauthenticated remote vulnerability (CVSS 9.8) exists in Oracle Hyperion Infrastructure Technology's Installation and Configuration component (version 11.2.25.0.000). An attacker with HTTP network access can fully compromise the application, impacting confidentiality, integrity, and a...