CVE-2026-62448

Oracle Email Center's Message Component (E-Business Suite 12.2.3–12.2.15) has a HIGH-severity flaw (CVSS 8.2): an unauthenticated, network-accessible HTTP attacker can gain full data read access and partial write access via human interaction, with scope change potentially affecting additional pro...

CVE-2026-62441

Oracle Hyperion Calculation Manager 11.2.25.0.000 has an easily exploitable Security-component flaw; a low-privilege network attacker via HTTP can gain unauthorized read and write access to some application data. Oracle's CSPU August 2026 advisory likely contains remediation details.

CVE-2026-61341

Oracle Siebel CRM Cloud Manager (versions 22.3-26.6) has an easily exploitable vulnerability allowing low-privileged, network-based attackers to fully compromise the application. CVSS 3.1 scores 8.8 (HIGH) for confidentiality, integrity, and availability impact. CISA SSVC confirms no known exploi...

CVE-2026-61342

CVE-2026-61342 affects Oracle Hyperion Calculation Manager version 11.2.25.0.000, specifically its Security component. An unauthenticated attacker with network HTTP access can exploit it with high attack complexity and user interaction to gain unauthorized access to critical or all accessible dat...

CVE-2026-61340

CVE-2026-61340 affects the Oracle MES for Process Manufacturing component (Internal Operations) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability, though successful exploitation requires user ...

CVE-2026-61339

CVE-2026-61339 affects Oracle Siebel CRM's Siebel Cloud Manager component (versions 22.3-26.6) with a HIGH-severity (CVSS 7.3) local attack vector allowing a low-privileged attacker to read all accessible CRM data and perform unauthorized updates; exploitation details are not provided in the docu...

CVE-2026-61332

Oracle Siebel CRM Cloud Manager (versions 22.3-26.6) has an easily exploitable vulnerability allowing a high-privileged attacker with network HTTP access to compromise Siebel CRM Cloud Applications, enabling unauthorized creation, deletion, or modification of critical data. No exploitation or pat...

CVE-2026-61331

Oracle E-Business Suite's Financials Common Modules (component: Common Components), versions 12.2.3 through 12.2.15, has an easily exploitable vulnerability allowing low-privileged, network-based HTTP attackers to gain unauthorized access to critical or all accessible data (CVSS 3.1: 7.7 HIGH, co...

CVE-2026-61330

Oracle Siebel CRM's Siebel Cloud Manager component (versions 22.3-26.6) has a HIGH-severity (CVSS 8.8) network-exploitable flaw; a low-privileged attacker via HTTP can fully compromise the application. No exploitation details provided. Apply Oracle's August 2026 CPU patch (cspuaug2026.html).

CVE-2026-61326

Oracle Siebel Cloud Manager (component of Siebel CRM Cloud Applications, versions 22.3-26.6) is affected by a high-severity (CVSS 8.5) vulnerability allowing low-privileged network attackers to access and modify data across scope. No exploitation details are provided. Patch details are in Oracle'...

CVE-2026-61319

CVE-2026-61319 affects Oracle E-Business Suite's Internal Operations component (versions 12.2.3–12.2.15). A low-privileged, network-accessible attacker can exploit it for full system compromise (CVSS 8.8 HIGH). Oracle's August 2026 CPU advisory is referenced for patches. No exploitation or root-c...

CVE-2026-61321

CVE-2026-61321 affects Oracle Siebel CRM Siebel Cloud Manager (versions 22.3–26.6). A low-privileged attacker with network HTTP access can compromise all Siebel CRM Cloud Applications data, gaining unauthorized read, write, and deletion access. CVSS 3.1 score: 8.1 (HIGH). No exploitation details ...

CVE-2026-61318

CVE-2026-61318 is a critical vulnerability (CVSS 3.1: 9.8 ) in Oracle Siebel CRM Cloud Applications , specifically the Siebel Cloud Manager component. Affected versions span 22.3 through 26.6 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to achieve full...

CVE-2026-61317

CVE-2026-61317 is a critical (CVSS 9.9) flaw in Oracle Siebel CRM's Siebel Cloud Manager component (versions 22.3–26.6), exploitable over HTTP by low-privileged attackers to fully compromise the application; exploitation in the wild is not reported. Patch details are not provided; refer to Oracle...

CVE-2026-61313

The Security component of Oracle Hyperion Calculation Manager version 11.2.25.0.000 is affected by a local, easily exploitable vulnerability requiring high privileges, rated CVSS 3.1 6.7 (MEDIUM). Successful exploitation can grant unauthorized access to critical data and cause scope change impact...

CVE-2026-61308

A medium-severity (CVSS 6.8) vulnerability in the Networking component of Oracle Java SE (8u501 through 26.0.2), GraalVM for JDK (17.0.20, 21.0.12), and GraalVM Enterprise Edition (21.3.19) allows unauthenticated remote attackers via HTTP to access critical data with high confidentiality impact; ...

CVE-2026-61307

Affected product: Oracle PeopleSoft Enterprise CC Common Application Objects, version 9.2. Root cause/impact: Unauthenticated, network-accessible attacker via Oracle Net can achieve full takeover of the application (C/I/A HIGH), CVSS 8.1. Remediation: Oracle's August 2026 Critical Patch Update ad...

CVE-2026-61306

Oracle E-Business Suite Complex Maintenance, Repair and Overhaul component (Production) is affected in versions 12.2.3–12.2.15. A low-privileged attacker with network HTTP access can exploit this difficult-to-exploit vulnerability, which has scope change, to gain unauthorized access to critical d...

CVE-2026-61305

A HIGH-severity vulnerability (CVSS 8.3) in Oracle BI Publisher's BI Platform Security component affects versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0. A low-privileged network attacker can gain unauthorized read/write access to all BI Publisher data and cause partial DoS. No exploitation detai...

CVE-2026-61300

CVE-2026-61300 affects Oracle Enterprise Manager Base Platform versions 13.5 and 24.1, specifically the Agent Next Gen component. A low-privileged local attacker can exploit this easily exploitable flaw to fully compromise the platform, with HIGH impact on confidentiality, integrity, and availabi...