33032 matches found
CVE-2026-62633
...
CVE-2026-62626
Oracle Reports Developer 12.2.1.19.0 (component: Security and Authentication) is vulnerable to an unauthenticated, network-accessible HTTP exploit allowing full system takeover (CVSS 9.8). Oracle's August 2026 CPU addresses this; no public exploit code is documented. Organizations running affecte...
CVE-2026-62625
CVE-2026-62625 affects Oracle Reports Developer 12.2.1.19.0 (component: Security and Authentication) in Oracle Fusion Middleware. An unauthenticated attacker with network access via SOAP can exploit this vulnerability to gain complete access to all accessible data , perform unauthorized updates, ...
CVE-2026-62622
...
CVE-2026-62620
...
CVE-2026-62615
...
CVE-2026-62613
CVE-2026-62613 affects the Security and Authentication component of Oracle Reports Developer (Oracle Fusion Middleware), version 12.2.1.19.0 . An unauthenticated attacker with access to the adjacent network segment can exploit this vulnerability with low complexity to compromise the product. Due ...
CVE-2026-62606
...
CVE-2026-62606
Oracle Hyperion Calculation Manager 11.2.25.0.000 Security component has a network-based vulnerability (CVSS 3.1, LOW) allowing low-privileged attackers to gain unauthorized read access to a subset of data. No exploit or patch details are provided; see Oracle's advisory: https://www.oracle.com/se...
CVE-2026-62603
Oracle Hyperion Calculation Manager 11.2.25.0.000's Security component is affected by a medium-severity flaw (CVSS 5.4). An unauthenticated attacker with physical access to the hardware's communication segment can gain unauthorized read and write access to some application data. Oracle's August 2...
CVE-2026-62591
Affected product: Oracle Siebel CRM Integration, component Open Integration, versions 25.12–26.6. Root cause: unspecified, but easily exploitable via unauthenticated HTTP. Impact: CVSS 8.1 HIGH — unauthorized read/write of all accessible critical data. Exploitation: not reported in the wild. Reme...
CVE-2026-62589
Oracle Siebel CRM's Open Integration component (versions 25.12-26.6) has a HIGH-severity (CVSS 8.7) flaw exploitable by an unauthenticated remote attacker over HTTP with high attack complexity, enabling unauthorized read/write access to critical data with scope change. CISA SSVC rates technical i...
CVE-2026-62588
...
CVE-2026-62583
The vulnerability affects Oracle Hyperion Infrastructure Technology version 11.2.25.0.000, specifically the Installation and Configuration component. CVSS 3.1 scores it LOW (3.0) requiring high privileges and local access; successful exploitation permits unauthorized data modification and partial...
CVE-2026-62566
CVE-2026-62566 affects Oracle Hyperion Infrastructure Technology version 11.2.25.0.000, in the Installation and Configuration component. An unauthenticated, network-accessible attacker can exploit it via HTTP to gain unauthorized read access to a subset of data, scoring CVSS 5.3 (Medium). Oracle'...
CVE-2026-62570
...
CVE-2026-62564
A local low-privileged attacker can exploit a flaw in the Installation and Configuration component of Oracle Hyperion Infrastructure Technology (affected version 11.2.25.0.000) to gain unauthorized access to all accessible data; CVSS 3.1 score 5.5 (MEDIUM), with high confidentiality impact only. ...
CVE-2026-62552
...
CVE-2026-62554
Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 has an easily exploitable, unauthenticated HTTP-accessible vulnerability in its Installation and Configuration component, enabling unauthorized access to critical data (CVSS 7.5 HIGH). No patch or exploit details are provided; Oracle...