33299 matches found
CVE-2026-70965
...
CVE-2026-70963
Oracle Hyperion Infrastructure Technology (version 11.2.25.0.000, Installation and Configuration component) is vulnerable to a network-accessible attack requiring low privileges. A successful exploit yields unauthorized read and write access to a subset of data. CVSS 4.2 (Medium) reflects high at...
CVE-2026-70960
...
CVE-2026-70960
Oracle Hyperion Financial Management 11.2.25.0.000 has a HIGH-severity (CVSS 7.6) Security component flaw exploitable over HTTP by a low-privileged attacker, enabling unauthorized data access and modification with scope change. Oracle's August 2026 CPU patch is the remediation. No in-the-wild exp...
CVE-2026-70959
...
CVE-2026-70957
Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) at version 11.2.25.0.000 has a HIGH-severity (CVSS 8.1) flaw: a low-privileged network attacker via HTTP can gain unauthorized read/write access to critical application data. No exploit or patch details are prov...
CVE-2026-70955
...
CVE-2026-70951
...
CVE-2026-70952
Oracle Hyperion Financial Management version 11.2.25.0.000 is affected by a HIGH-severity (CVSS 3.1 base score 8.2) vulnerability in its Security component. An unauthenticated attacker with network access via HTTP can exploit it to gain unauthorized access to critical or all product data and caus...
CVE-2026-70950
Oracle Hyperion Financial Management Security component (version 11.2.25.0.000) has an easily exploitable HIGH-severity flaw (CVSS 7.2) allowing a high-privileged network attacker via HTTP to achieve full system takeover with high confidentiality, integrity, and availability impact. No exploitati...
CVE-2026-70949
Affected: Oracle Siebel CRM Server Infrastructure, versions 17.0–26.6. Easily exploitable via HTTP by low-privileged network attacker, enabling full deployment takeover (CVSS 8.8 HIGH, C/I/A all HIGH). Oracle published patches in the August 2026 CPU advisory; no exploitation details are provided ...
CVE-2026-70948
Oracle E-Business Suite Purchasing (versions 12.2.3–12.2.15) has a HIGH-severity flaw allowing a low-privileged attacker with network access to fully compromise the application; apply Oracle's August 2026 CPU patches immediately. No exploitation details are provided in the documents.
CVE-2026-70942
Oracle's August 2026 Critical Patch Update (referenced in the CVE) addresses CVE-2026-70942 in the Security component of HFM 11.2.25.0.000, a HIGH-severity issue exploitable by low-privileged network attackers with no user interaction. No exploitation details are provided; apply Oracle's August 2...
CVE-2026-70944
Oracle's August 2026 Critical Patch Update (CSPRAUG2026) addresses CVE-2026-70944, a high-severity flaw in the Security component of Hyperion Financial Management 11.2.25.0.000, exploitable over TCP by a low-privileged attacker to achieve full product compromise (CVSS 8.8). Apply the August 2026 ...
CVE-2026-70937
...
CVE-2026-70938
...
CVE-2026-70936
...
CVE-2026-70937
A HIGH-severity flaw in Oracle Hyperion Financial Management 11.2.25.0.000 Security component allows a low-privileged, network-authenticated attacker via HTTP to achieve full product compromise (confidentiality, integrity, availability). No exploitation evidence is provided; Oracle's August 2026 ...