CVE-2026-62492

Oracle Hyperion Infrastructure Technology (component: Common Security), affected version 11.2.25.0.000, contains a HIGH-severity vulnerability (CVSS 7.4) exploitable via HTTPS by an unauthenticated network attacker. Successful exploitation can result in unauthorized creation, deletion, or modific...

CVE-2026-62467

Oracle Hyperion Infrastructure Technology 11.2.25.0.000, component "Common Events," is affected by a HIGH-severity flaw (CVSS 7.7, S:C/C:H/I:N/A:N). A low-privileged network attacker via HTTP can gain unauthorized access to critical data, with scope change potentially impacting additional product...

CVE-2026-62462

Oracle E-Business Suite Work in Process (component: Internal Operations) versions 12.2.3-12.2.15 is vulnerable. A low-privileged attacker with network access via HTTP can exploit it for full CIA impact (CVSS 8.8 HIGH). Oracle's August 2026 CPU advisory is referenced for patch details; no exploit ...

CVE-2026-62461

Oracle Hyperion Calculation Manager version 11.2.25.0.000 has a Security component flaw exploitable by an unauthenticated remote attacker over HTTP, requiring victim interaction, that can lead to unauthorized read access to a subset of application data (CVSS 3.1 LOW, C:L/I:N/A:N). The Oracle Augu...

CVE-2026-62442

...

CVE-2026-61330

...

CVE-2026-61319

...

CVE-2026-61308

A medium-severity (CVSS 6.8) vulnerability in the Networking component of Oracle Java SE (8u501 through 26.0.2), GraalVM for JDK (17.0.20, 21.0.12), and GraalVM Enterprise Edition (21.3.19) allows unauthenticated remote attackers via HTTP to access critical data with high confidentiality impact; ...

CVE-2026-61307

Affected product: Oracle PeopleSoft Enterprise CC Common Application Objects, version 9.2. Root cause/impact: Unauthenticated, network-accessible attacker via Oracle Net can achieve full takeover of the application (C/I/A HIGH), CVSS 8.1. Remediation: Oracle's August 2026 Critical Patch Update ad...

CVE-2026-61295

CVE-2026-61295 affects Oracle WebCenter Content Content Server in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated local attacker can exploit it to gain unauthorized access to critical or all accessible data. CVSS 3.1 base score is 7.1 (HIGH). No exploitation detail...

CVE-2026-61290

A HIGH-severity (CVSS 7.1) vulnerability in Oracle WebCenter Content's Content Server component affects versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network HTTP access can exploit it (requiring human interaction and high complexity) to compromise all three security pillars ...

CVE-2026-61288

...

CVE-2026-61284

A HIGH-severity (CVSS 8.8) flaw in Oracle Enterprise Manager's Application Config Console affects versions 13.5 and 24.1; an HTTP-accessible, low-privilege attacker can fully compromise the platform (C/I/A impacts). Exploitation details and fix version are not provided in the documents; apply Ora...

CVE-2026-61273

...

CVE-2026-61272

Oracle JD Edwards EnterpriseOne Tools (component: Web Runtime SEC , versions 9.2.0.0–9.2.26.4) is affected by a critical (CVSS 9.8) remotely exploitable vulnerability: an unauthenticated attacker over HTTP can fully compromise the application (C/I/A all High). Patch guidance is available in Oracl...

CVE-2026-61259

...

CVE-2026-61265

...

CVE-2026-61230

...

CVE-2026-61229

Oracle WebCenter Portal (Fusion Middleware) Runtime Tools component, versions 12.2.1.4.0 and 14.1.2.0.0, is vulnerable to a HIGH-severity (CVSS 8.1) unauthenticated remote HTTP attack requiring high complexity; successful exploitation can fully compromise the application. No specific root cause o...

CVE-2026-61227

CVE-2026-61227 affects the Runtime Tools component of Oracle WebCenter Portal (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though user interaction is required . Due to a scope change , succe...