36295 matches found
CVE-2026-70761
CVE-2026-70761 affects the Oracle Risk Management product (component: Internal Operations) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability without user interaction to achieve full takeover of ...
CVE-2026-70763
A HIGH-severity vulnerability in Oracle E-Business Suite (component: Daily Business Intelligence), affecting versions 12.2.3–12.2.15, allows a low-privileged attacker via HTTP to compromise the application with full C/I/A impact. No specific root cause or exploit details are provided; Oracle's Au...
CVE-2026-70761
...
CVE-2026-70754
...
CVE-2026-70752
...
CVE-2026-70753
A low-privileged, network-accessible attacker can exploit a flaw in the Server component of Oracle Hyperion Financial Reporting 11.2.25.0.000 via HTTP, requiring only user interaction, to read all accessible data and perform limited unauthorized updates. Oracle's August 2026 security advisory is ...
CVE-2026-70750
Oracle Hyperion Financial Reporting Server (affected version 11.2.25.0.000) is vulnerable to local privilege escalation; a low-privileged attacker with system access can achieve full product takeover (C/I/A impact, CVSS 7.8 High). No exploitation details provided; refer to Oracle's August 2026 se...
CVE-2026-70751
Oracle Hyperion Financial Reporting (Server component), version 11.2.25.0.000 , is affected by a vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the system. Exploitation is rated as difficult (high complexity) and requires user interaction from a p...
CVE-2026-70734
Oracle Autonomous Health Framework's Trace File Analyzer component (versions 26.1.0, 26.2.0, 26.3.1, 26.5.0, 26.5.2) is affected by a HIGH-severity (CVSS 7.4) local vulnerability requiring high privileges and user interaction. Successful exploitation permits unauthorized data modification/deletio...
CVE-2026-70734
...
CVE-2026-70731
...
CVE-2026-70730
...
CVE-2026-70726
CVE-2026-70726 affects the Internal Operations component of Oracle Cash Management in E-Business Suite versions 12.2.3 through 12.2.15. A high-privileged local attacker can modify or access all Cash Management data (CVSS 6.0, Medium). Oracle released patches in its August 2026 Critical Patch Upda...
CVE-2026-70725
Oracle E-Business Suite 12.2.3–12.2.15, Advanced Inbound Telephony component (Internal Operations), is vulnerable to network-based HTTP attacks by low-privileged attackers, enabling unauthorized data access and partial DoS (CVSS 7.6). No in-the-wild exploitation reported. Patch details: https://w...
CVE-2026-70726
...
CVE-2026-70722
CVE-2026-70722 affects Oracle E-Business Suite (Advanced Inbound Telephony, Internal Operations) versions 12.2.3-12.2.15, exploitable over HTTPS by an unauthenticated attacker. CVSS 8.2 (HIGH) yields unauthorized data modification/deletion and partial DoS. Oracle's August 2026 CPU advisory (cspua...
CVE-2026-70723
...
CVE-2026-70722
...