CVE-2026-70981

Oracle Commerce 11.4.0 Content Acquisition System is affected by a critical (CVSS 9.1) unauthenticated network-based vulnerability enabling unauthorized data modification and denial of service. No exploitation details are provided; refer to Oracle's August 2026 security alert for patch information.

CVE-2026-70972

...

CVE-2026-70973

...

CVE-2026-70970

...

CVE-2026-70971

Oracle Hyperion Infrastructure Technology 11.2.25.0.000 (Installation and Configuration component) has a network-reachable vulnerability allowing a low-privileged attacker to gain unauthorized access to critical data and modify some data. CVSS 7.1 (HIGH). No exploit details provided; remediation ...

CVE-2026-70967

...

CVE-2026-70968

...

CVE-2026-70963

Oracle Hyperion Infrastructure Technology (version 11.2.25.0.000, Installation and Configuration component) is vulnerable to a network-accessible attack requiring low privileges. A successful exploit yields unauthorized read and write access to a subset of data. CVSS 4.2 (Medium) reflects high at...

CVE-2026-70965

...

CVE-2026-70960

...

CVE-2026-70960

Oracle Hyperion Financial Management 11.2.25.0.000 has a HIGH-severity (CVSS 7.6) Security component flaw exploitable over HTTP by a low-privileged attacker, enabling unauthorized data access and modification with scope change. Oracle's August 2026 CPU patch is the remediation. No in-the-wild exp...

CVE-2026-70959

...

CVE-2026-70957

Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) at version 11.2.25.0.000 has a HIGH-severity (CVSS 8.1) flaw: a low-privileged network attacker via HTTP can gain unauthorized read/write access to critical application data. No exploit or patch details are prov...

CVE-2026-70955

...

CVE-2026-70951

...

CVE-2026-70952

Oracle Hyperion Financial Management version 11.2.25.0.000 is affected by a HIGH-severity (CVSS 3.1 base score 8.2) vulnerability in its Security component. An unauthenticated attacker with network access via HTTP can exploit it to gain unauthorized access to critical or all product data and caus...

CVE-2026-70950

Oracle Hyperion Financial Management Security component (version 11.2.25.0.000) has an easily exploitable HIGH-severity flaw (CVSS 7.2) allowing a high-privileged network attacker via HTTP to achieve full system takeover with high confidentiality, integrity, and availability impact. No exploitati...

CVE-2026-70949

Affected: Oracle Siebel CRM Server Infrastructure, versions 17.0–26.6. Easily exploitable via HTTP by low-privileged network attacker, enabling full deployment takeover (CVSS 8.8 HIGH, C/I/A all HIGH). Oracle published patches in the August 2026 CPU advisory; no exploitation details are provided ...

CVE-2026-70948

Oracle E-Business Suite Purchasing (versions 12.2.3–12.2.15) has a HIGH-severity flaw allowing a low-privileged attacker with network access to fully compromise the application; apply Oracle's August 2026 CPU patches immediately. No exploitation details are provided in the documents.

CVE-2026-70942

Oracle's August 2026 Critical Patch Update (referenced in the CVE) addresses CVE-2026-70942 in the Security component of HFM 11.2.25.0.000, a HIGH-severity issue exploitable by low-privileged network attackers with no user interaction. No exploitation details are provided; apply Oracle's August 2...