CVE-2026-62545

...

CVE-2026-62543

...

CVE-2026-62540

...

CVE-2026-62539

A critical unauthenticated remote vulnerability (CVSS 9.8) exists in Oracle Hyperion Infrastructure Technology's Installation and Configuration component (version 11.2.25.0.000). An attacker with HTTP network access can fully compromise the application, impacting confidentiality, integrity, and a...

CVE-2026-62537

...

CVE-2026-62531

Oracle Hyperion Infrastructure Technology component Lifecycle Management (version 11.2.25.0.000) is affected by a HIGH-severity (CVSS 8.1) vulnerability exploitable by an unauthenticated attacker over HTTP, potentially resulting in full system takeover. No exploitation details are provided in the...

CVE-2026-62531

...

CVE-2026-62532

...

CVE-2026-62523

...

CVE-2026-62520

...

CVE-2026-62520

CVE-2026-62520 affects Oracle Hyperion Infrastructure Technology (component: Common Events ), version 11.2.25.0.000 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized read and write (update/insert/delete) access to a subset of accessible...

CVE-2026-62511

CVE-2026-62511 affects Oracle Hyperion Infrastructure Technology 11.2.25.0.000 (Installation and Configuration component). It requires local access, high privileges, and high complexity, yielding CVSS 3.0 (LOW) with only low confidentiality and integrity impact. No exploit or detailed root cause ...

CVE-2026-62512

...

CVE-2026-62512

Oracle Siebel CRM Cloud Applications (component: Siebel Cloud Manager), versions 22.3 through 26.6, contain a critical (CVSS 9.9) flaw exploitable over HTTP by a low-privileged attacker, enabling full system compromise with scope change affecting additional products. No exploitation details are p...

CVE-2026-62510

Affected product: Oracle Hyperion Infrastructure Technology version 11.2.25.0.000. Root cause: unspecified flaw in the Installation and Configuration component. Impact: unauthenticated remote attacker can obtain limited read access to application data over HTTP (CVSS 5.3, MEDIUM). No patch versio...

CVE-2026-62500

...

CVE-2026-62492

Oracle Hyperion Infrastructure Technology (component: Common Security), affected version 11.2.25.0.000, contains a HIGH-severity vulnerability (CVSS 7.4) exploitable via HTTPS by an unauthenticated network attacker. Successful exploitation can result in unauthorized creation, deletion, or modific...

CVE-2026-62467

Oracle Hyperion Infrastructure Technology 11.2.25.0.000, component "Common Events," is affected by a HIGH-severity flaw (CVSS 7.7, S:C/C:H/I:N/A:N). A low-privileged network attacker via HTTP can gain unauthorized access to critical data, with scope change potentially impacting additional product...

CVE-2026-62462

Oracle E-Business Suite Work in Process (component: Internal Operations) versions 12.2.3-12.2.15 is vulnerable. A low-privileged attacker with network access via HTTP can exploit it for full CIA impact (CVSS 8.8 HIGH). Oracle's August 2026 CPU advisory is referenced for patch details; no exploit ...

CVE-2026-62461

Oracle Hyperion Calculation Manager version 11.2.25.0.000 has a Security component flaw exploitable by an unauthenticated remote attacker over HTTP, requiring victim interaction, that can lead to unauthorized read access to a subset of application data (CVSS 3.1 LOW, C:L/I:N/A:N). The Oracle Augu...