CVE-2026-70674

CVE-2026-70674 affects Oracle Reports Developer 14.1.2.0.0 (component: Security and Authentication). An unauthenticated attacker with access to the physical communication segment can fully compromise the product (CVSS 8.8 HIGH). No exploit details are provided; refer to Oracle's August 2026 CPU a...

CVE-2026-62638

Oracle Reports Developer 14.1.2.0.0 (Security and Authentication component) has a critical CVSS 9.1 flaw: unauthenticated remote attackers via HTTP can modify/delete data and crash the service (complete DoS). No exploit details provided. Patch status is not specified in the documents. Monitor Ora...

CVE-2026-62636

Oracle Reports Developer 14.1.2.0.0 (Security and Authentication component) is vulnerable to an unauthenticated, remotely exploitable SOAP attack (CVSS 8.6) yielding unauthorized data access, modification, and partial DoS. Oracle's August 2026 Critical Patch Update addresses it; apply patches per...

CVE-2026-62637

...

CVE-2026-62633

...

CVE-2026-62626

Oracle Reports Developer 12.2.1.19.0 (component: Security and Authentication) is vulnerable to an unauthenticated, network-accessible HTTP exploit allowing full system takeover (CVSS 9.8). Oracle's August 2026 CPU addresses this; no public exploit code is documented. Organizations running affecte...

CVE-2026-62625

CVE-2026-62625 affects Oracle Reports Developer 12.2.1.19.0 (component: Security and Authentication) in Oracle Fusion Middleware. An unauthenticated attacker with network access via SOAP can exploit this vulnerability to gain complete access to all accessible data , perform unauthorized updates, ...

CVE-2026-62622

...

CVE-2026-62620

...

CVE-2026-62615

...

CVE-2026-62613

CVE-2026-62613 affects the Security and Authentication component of Oracle Reports Developer (Oracle Fusion Middleware), version 12.2.1.19.0 . An unauthenticated attacker with access to the adjacent network segment can exploit this vulnerability with low complexity to compromise the product. Due ...

CVE-2026-62606

...

CVE-2026-62606

Oracle Hyperion Calculation Manager 11.2.25.0.000 Security component has a network-based vulnerability (CVSS 3.1, LOW) allowing low-privileged attackers to gain unauthorized read access to a subset of data. No exploit or patch details are provided; see Oracle's advisory: https://www.oracle.com/se...

CVE-2026-62603

Oracle Hyperion Calculation Manager 11.2.25.0.000's Security component is affected by a medium-severity flaw (CVSS 5.4). An unauthenticated attacker with physical access to the hardware's communication segment can gain unauthorized read and write access to some application data. Oracle's August 2...

CVE-2026-62591

Affected product: Oracle Siebel CRM Integration, component Open Integration, versions 25.12–26.6. Root cause: unspecified, but easily exploitable via unauthenticated HTTP. Impact: CVSS 8.1 HIGH — unauthorized read/write of all accessible critical data. Exploitation: not reported in the wild. Reme...

CVE-2026-62589

Oracle Siebel CRM's Open Integration component (versions 25.12-26.6) has a HIGH-severity (CVSS 8.7) flaw exploitable by an unauthenticated remote attacker over HTTP with high attack complexity, enabling unauthorized read/write access to critical data with scope change. CISA SSVC rates technical i...

CVE-2026-62588

...

CVE-2026-62583

The vulnerability affects Oracle Hyperion Infrastructure Technology version 11.2.25.0.000, specifically the Installation and Configuration component. CVSS 3.1 scores it LOW (3.0) requiring high privileges and local access; successful exploitation permits unauthorized data modification and partial...

CVE-2026-62566

CVE-2026-62566 affects Oracle Hyperion Infrastructure Technology version 11.2.25.0.000, in the Installation and Configuration component. An unauthenticated, network-accessible attacker can exploit it via HTTP to gain unauthorized read access to a subset of data, scoring CVSS 5.3 (Medium). Oracle'...

CVE-2026-62570

...