CVE-2026-61331

Oracle E-Business Suite's Financials Common Modules (component: Common Components), versions 12.2.3 through 12.2.15, has an easily exploitable vulnerability allowing low-privileged, network-based HTTP attackers to gain unauthorized access to critical or all accessible data (CVSS 3.1: 7.7 HIGH, co...

CVE-2026-61330

Oracle Siebel CRM's Siebel Cloud Manager component (versions 22.3-26.6) has a HIGH-severity (CVSS 8.8) network-exploitable flaw; a low-privileged attacker via HTTP can fully compromise the application. No exploitation details provided. Apply Oracle's August 2026 CPU patch (cspuaug2026.html).

CVE-2026-61326

Oracle Siebel Cloud Manager (component of Siebel CRM Cloud Applications, versions 22.3-26.6) is affected by a high-severity (CVSS 8.5) vulnerability allowing low-privileged network attackers to access and modify data across scope. No exploitation details are provided. Patch details are in Oracle'...

CVE-2026-61319

CVE-2026-61319 affects Oracle E-Business Suite's Internal Operations component (versions 12.2.3–12.2.15). A low-privileged, network-accessible attacker can exploit it for full system compromise (CVSS 8.8 HIGH). Oracle's August 2026 CPU advisory is referenced for patches. No exploitation or root-c...

CVE-2026-61321

CVE-2026-61321 affects Oracle Siebel CRM Siebel Cloud Manager (versions 22.3–26.6). A low-privileged attacker with network HTTP access can compromise all Siebel CRM Cloud Applications data, gaining unauthorized read, write, and deletion access. CVSS 3.1 score: 8.1 (HIGH). No exploitation details ...

CVE-2026-61318

CVE-2026-61318 is a critical vulnerability (CVSS 3.1: 9.8 ) in Oracle Siebel CRM Cloud Applications , specifically the Siebel Cloud Manager component. Affected versions span 22.3 through 26.6 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to achieve full...

CVE-2026-61317

CVE-2026-61317 is a critical (CVSS 9.9) flaw in Oracle Siebel CRM's Siebel Cloud Manager component (versions 22.3–26.6), exploitable over HTTP by low-privileged attackers to fully compromise the application; exploitation in the wild is not reported. Patch details are not provided; refer to Oracle...

CVE-2026-61313

The Security component of Oracle Hyperion Calculation Manager version 11.2.25.0.000 is affected by a local, easily exploitable vulnerability requiring high privileges, rated CVSS 3.1 6.7 (MEDIUM). Successful exploitation can grant unauthorized access to critical data and cause scope change impact...

CVE-2026-61308

A medium-severity (CVSS 6.8) vulnerability in the Networking component of Oracle Java SE (8u501 through 26.0.2), GraalVM for JDK (17.0.20, 21.0.12), and GraalVM Enterprise Edition (21.3.19) allows unauthenticated remote attackers via HTTP to access critical data with high confidentiality impact; ...

CVE-2026-61307

Affected product: Oracle PeopleSoft Enterprise CC Common Application Objects, version 9.2. Root cause/impact: Unauthenticated, network-accessible attacker via Oracle Net can achieve full takeover of the application (C/I/A HIGH), CVSS 8.1. Remediation: Oracle's August 2026 Critical Patch Update ad...

CVE-2026-61306

Oracle E-Business Suite Complex Maintenance, Repair and Overhaul component (Production) is affected in versions 12.2.3–12.2.15. A low-privileged attacker with network HTTP access can exploit this difficult-to-exploit vulnerability, which has scope change, to gain unauthorized access to critical d...

CVE-2026-61305

A HIGH-severity vulnerability (CVSS 8.3) in Oracle BI Publisher's BI Platform Security component affects versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0. A low-privileged network attacker can gain unauthorized read/write access to all BI Publisher data and cause partial DoS. No exploitation detai...

CVE-2026-61300

CVE-2026-61300 affects Oracle Enterprise Manager Base Platform versions 13.5 and 24.1, specifically the Agent Next Gen component. A low-privileged local attacker can exploit this easily exploitable flaw to fully compromise the platform, with HIGH impact on confidentiality, integrity, and availabi...

CVE-2026-61302

CVE-2026-61302 is a vulnerability in the Pod Admin component of Oracle Business Intelligence Enterprise Edition (Oracle Analytics), affecting versions 8.2.0.0.0 and 26.01.0.0.0 . An unauthenticated attacker with network access via HTTP can exploit this with low complexity to gain unauthorized acc...

CVE-2026-61296

The flaw affects Oracle E-Business Suite's Linear Asset Management component in versions 12.2.3 through 12.2.15. A low-privileged network attacker can exploit it via HTTP to gain unauthorized read access to critical data and limited write/delete access, with scope extending beyond the vulnerable ...

CVE-2026-61298

Affected component is the Enterprise Manager Install module in Oracle Enterprise Manager Base Platform versions 13.5 and 24.1. A low-privileged local attacker can exploit it to gain unauthorized access to all EM-managed data (confidentiality impact only; CVSS 5.6 medium). Oracle's August 2026 CPU...

CVE-2026-61295

CVE-2026-61295 affects Oracle WebCenter Content Content Server in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated local attacker can exploit it to gain unauthorized access to critical or all accessible data. CVSS 3.1 base score is 7.1 (HIGH). No exploitation detail...

CVE-2026-61293

CVE-2026-61293 affects Oracle Hyperion Calculation Manager 11.2.25.0.000 (Security component). An unauthenticated attacker with network access via HTTP can compromise the application, with CVSS 8.1 (HIGH) impact on confidentiality, integrity, and availability. Oracle's CSPRAug2026 advisory is the...

CVE-2026-61291

CVE-2026-61291 affects the Content Server component of Oracle WebCenter Content (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with local access to the infrastructure can exploit this vulnerability to achieve full takeover of the product, with high impa...

CVE-2026-61288

Oracle WebCenter Content (Content Server component, versions 12.2.1.4.0 and 14.1.2.0.0) is affected by an easily exploitable flaw allowing an unauthenticated network attacker via HTTP to compromise the system, requiring user interaction. Impact: unauthorized access to all accessible data and limi...