33299 matches found
CVE-2026-70885
Oracle Hyperion Data Relationship Management 11.2.25.0.000 has a HIGH-severity (CVSS 8.5) access and security flaw exploitable via HTTP by a low-privileged attacker, potentially causing product takeover and scope change. No exploit or patch details are provided; monitor Oracle's August 2026 CPU f...
CVE-2026-70887
...
CVE-2026-70884
...
CVE-2026-70882
...
CVE-2026-70883
Oracle Hyperion Data Relationship Management version 11.2.25.0.000 has a critical (CVSS 9.1) flaw in its Access and security component. An unauthenticated remote attacker over HTTP can gain unauthorized read/write access to all application data. Exploitation details are not provided; apply the Or...
CVE-2026-70881
...
CVE-2026-70880
...
CVE-2026-70880
Oracle Hyperion Data Relationship Management 11.2.25.0.000 has a critical flaw in its Access and security component. Unauthenticated attackers with network TCP access can fully compromise the application (CVSS 10.0), with potential scope change affecting additional products. Oracle's August 2026 ...
CVE-2026-70877
A CVSS 8.8 HIGH-severity flaw in Oracle Hyperion Data Relationship Management 11.2.25.0.000 (Access and security component) allows low-privileged, network-authenticated attackers via HTTP to fully compromise the application (C/H/I/A all High). Oracle's August 2026 CPU advisory is the patch refere...
CVE-2026-70873
...
CVE-2026-70874
Oracle Hyperion Data Relationship Management version 11.2.25.0.000 has an easily exploitable flaw in its Access and security component. A low-privileged attacker with network HTTP access can achieve full compromise (confidentiality, integrity, availability). Oracle's August 2026 CPU provides the ...
CVE-2026-70872
Oracle Hyperion Data Relationship Management (component: Access and security), version 11.2.25.0.000, is affected by an unauthenticated, network-reachable flaw (CVSS 9.1) enabling full confidentiality and integrity compromise of accessible data; no public exploit details are available. Patch guid...
CVE-2026-70872
...
CVE-2026-70867
Oracle Application Testing Suite 13.3.0.1 has an easily exploitable flaw allowing unauthenticated attackers on the adjacent physical network segment to compromise the system, achieving high confidentiality impact and low integrity impact. Patch details are not provided; refer to Oracle's August 2...
CVE-2026-70865
...
CVE-2026-70865
A network-accessible vulnerability in Oracle Application Testing Suite 13.3.0.1 allows a low-privileged attacker (with "Load Testing for Web Apps" privilege) over HTTPS to achieve full system takeover, with HIGH impacts across confidentiality, integrity, and availability (CVSS 7.5). Oracle has re...
CVE-2026-70861
Oracle PeopleSoft 9.1 (component: Common Objects Brazil) has an easily exploitable flaw reachable via T3 and IIOP protocols; a high-privileged network attacker can fully compromise the component (C/H/I/A), CVSS 7.2 High. No patch or exploit details are provided in the documents; monitor Oracle's ...
CVE-2026-70859
...
CVE-2026-70859
Oracle Siebel CRM Integration (REST component) is vulnerable in versions 17.0–26.6 . A low-privilege network attacker can exploit this via HTTP with high attack complexity to achieve full takeover of the product, with a scope change meaning additional products may be impacted. The CVSS 3.1 score ...