CVE-2026-70691

...

CVE-2026-70688

...

CVE-2026-70690

CVE-2026-70690 is a vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite , specifically in the US Payroll - General component. Affected versions are 12.2.3 through 12.2.15 . The vulnerability is difficult to exploit and requires a high-privileged attacker with network access v...

CVE-2026-70690

...

CVE-2026-70685

Affected component: Oracle Hyperion Calculation Manager Security component, version 11.2.25.0.000. Root cause: unauthenticated attacker with local infrastructure access can compromise the application. Impact: high confidentiality breach and low integrity impact, with scope change affecting additi...

CVE-2026-70678

...

CVE-2026-70679

...

CVE-2026-70678

Oracle Hyperion Calculation Manager version 11.2.25.0.000 (Security component) is affected by a vulnerability allowing a low-privileged attacker with network access via HTTP to compromise the product. Successful exploitation requires user interaction from a person other than the attacker. Due to ...

CVE-2026-70675

Oracle Reports Developer 14.1.2.0.0 (Oracle Fusion Middleware, Security and Authentication component) is vulnerable to unauthenticated remote HTTP attacks leading to full system takeover. CVSS 3.1 scores 8.1 (HIGH). Oracle's August 2026 CPU patches this issue; NCSC recommends prioritizing the upd...

CVE-2026-70674

CVE-2026-70674 affects Oracle Reports Developer 14.1.2.0.0 (component: Security and Authentication). An unauthenticated attacker with access to the physical communication segment can fully compromise the product (CVSS 8.8 HIGH). No exploit details are provided; refer to Oracle's August 2026 CPU a...

CVE-2026-62638

Oracle Reports Developer 14.1.2.0.0 (Security and Authentication component) has a critical CVSS 9.1 flaw: unauthenticated remote attackers via HTTP can modify/delete data and crash the service (complete DoS). No exploit details provided. Patch status is not specified in the documents. Monitor Ora...

CVE-2026-62636

Oracle Reports Developer 14.1.2.0.0 (Security and Authentication component) is vulnerable to an unauthenticated, remotely exploitable SOAP attack (CVSS 8.6) yielding unauthorized data access, modification, and partial DoS. Oracle's August 2026 Critical Patch Update addresses it; apply patches per...

CVE-2026-62637

...

CVE-2026-62633

...

CVE-2026-62626

Oracle Reports Developer 12.2.1.19.0 (component: Security and Authentication) is vulnerable to an unauthenticated, network-accessible HTTP exploit allowing full system takeover (CVSS 9.8). Oracle's August 2026 CPU addresses this; no public exploit code is documented. Organizations running affecte...

CVE-2026-62625

CVE-2026-62625 affects Oracle Reports Developer 12.2.1.19.0 (component: Security and Authentication) in Oracle Fusion Middleware. An unauthenticated attacker with network access via SOAP can exploit this vulnerability to gain complete access to all accessible data , perform unauthorized updates, ...

CVE-2026-62622

...

CVE-2026-62620

...

CVE-2026-62615

...

CVE-2026-62613

CVE-2026-62613 affects the Security and Authentication component of Oracle Reports Developer (Oracle Fusion Middleware), version 12.2.1.19.0 . An unauthenticated attacker with access to the adjacent network segment can exploit this vulnerability with low complexity to compromise the product. Due ...