CVE-2026-70773

A HIGH severity (CVSS 8.2) vulnerability in Oracle E-Business Suite's Knowledge Integration component (versions 12.2.3–12.2.15) allows unauthenticated remote attackers via HTTP to read critical data and perform unauthorized update/insert/delete operations. Oracle has released patches in the Augus...

CVE-2026-70772

...

CVE-2026-70773

...

CVE-2026-70770

...

CVE-2026-70767

Oracle Hyperion Financial Reporting Server version 11.2.25.0.000 has an easily exploitable flaw allowing a low-privileged network attacker via HTTP to gain unauthorized access to critical or all product data (CVSS 6.5, confidentiality-only impact). No root cause or in-the-wild exploitation detail...

CVE-2026-70765

...

CVE-2026-70761

CVE-2026-70761 affects the Oracle Risk Management product (component: Internal Operations) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability without user interaction to achieve full takeover of ...

CVE-2026-70763

A HIGH-severity vulnerability in Oracle E-Business Suite (component: Daily Business Intelligence), affecting versions 12.2.3–12.2.15, allows a low-privileged attacker via HTTP to compromise the application with full C/I/A impact. No specific root cause or exploit details are provided; Oracle's Au...

CVE-2026-70761

...

CVE-2026-70752

...

CVE-2026-70754

...

CVE-2026-70753

A low-privileged, network-accessible attacker can exploit a flaw in the Server component of Oracle Hyperion Financial Reporting 11.2.25.0.000 via HTTP, requiring only user interaction, to read all accessible data and perform limited unauthorized updates. Oracle's August 2026 security advisory is ...

CVE-2026-70751

Oracle Hyperion Financial Reporting (Server component), version 11.2.25.0.000 , is affected by a vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the system. Exploitation is rated as difficult (high complexity) and requires user interaction from a p...

CVE-2026-70750

Oracle Hyperion Financial Reporting Server (affected version 11.2.25.0.000) is vulnerable to local privilege escalation; a low-privileged attacker with system access can achieve full product takeover (C/I/A impact, CVSS 7.8 High). No exploitation details provided; refer to Oracle's August 2026 se...

CVE-2026-70734

Oracle Autonomous Health Framework's Trace File Analyzer component (versions 26.1.0, 26.2.0, 26.3.1, 26.5.0, 26.5.2) is affected by a HIGH-severity (CVSS 7.4) local vulnerability requiring high privileges and user interaction. Successful exploitation permits unauthorized data modification/deletio...

CVE-2026-70734

...

CVE-2026-70731

...

CVE-2026-70730

...

CVE-2026-70726

CVE-2026-70726 affects the Internal Operations component of Oracle Cash Management in E-Business Suite versions 12.2.3 through 12.2.15. A high-privileged local attacker can modify or access all Cash Management data (CVSS 6.0, Medium). Oracle released patches in its August 2026 Critical Patch Upda...

CVE-2026-70725

Oracle E-Business Suite 12.2.3–12.2.15, Advanced Inbound Telephony component (Internal Operations), is vulnerable to network-based HTTP attacks by low-privileged attackers, enabling unauthorized data access and partial DoS (CVSS 7.6). No in-the-wild exploitation reported. Patch details: https://w...