CVE-2026-62598

Oracle Hyperion Calculation Manager version 11.2.25.0.000 is affected by a HIGH severity (CVSS 8.2) security component vulnerability exploitable via SFTP by a low-privileged remote attacker, enabling unauthorized read/write access to all application data with potential scope impact on additional ...

CVE-2026-62594

A HIGH-severity vulnerability (CVSS 7.7) affects Oracle Siebel CRM Integration's Open Integration component in versions 25.12–26.6. A high-privileged attacker with HTTP network access can cause unauthorized data creation/deletion/modification and complete DoS. The scope is changed, potentially im...

CVE-2026-62593

Oracle Siebel CRM Integration (component: Open Integration) is affected in versions 25.12–26.6. A low-privileged attacker with network HTTP access can compromise the integration, causing scope change and unauthorized access to critical data (CVSS 7.7 HIGH, C:H/I:N/A:N). Oracle's August 2026 CPU a...

CVE-2026-62592

Oracle Siebel CRM Integration (component: Open Integration ) versions 25.12–26.6 are affected by a critical vulnerability (CVSS 3.1: 9.8 ) that allows an unauthenticated attacker with network access via HTTP to achieve full takeover of the product, impacting confidentiality, integrity, and availa...

CVE-2026-62591

Affected product: Oracle Siebel CRM Integration, component Open Integration, versions 25.12–26.6. Root cause: unspecified, but easily exploitable via unauthenticated HTTP. Impact: CVSS 8.1 HIGH — unauthorized read/write of all accessible critical data. Exploitation: not reported in the wild. Reme...

CVE-2026-62590

Oracle's August 2026 CPU advisory (https://www.oracle.com/security-alerts/cspuaug2026.html) is the primary remediation source. Affected versions are Siebel CRM Open Integration 25.12 through 26.6; apply Oracle's CPU patches to address the high-severity (CVSS 8.5) network-exploitable flaw allowing...

CVE-2026-62589

Oracle Siebel CRM's Open Integration component (versions 25.12-26.6) has a HIGH-severity (CVSS 8.7) flaw exploitable by an unauthenticated remote attacker over HTTP with high attack complexity, enabling unauthorized read/write access to critical data with scope change. CISA SSVC rates technical i...

CVE-2026-62586

CVE-2026-62586 is a high-severity vulnerability (CVSS 3.1: 8.6 ) in the Data Archival component of Oracle Siebel CRM Administration , affecting versions 25.12–26.6 . An unauthenticated attacker with network access via HTTP can exploit this flaw to gain unauthorized access to critical data or comp...

CVE-2026-62588

CVE-2026-62588 affects Oracle Siebel CRM's Open Integration component (versions 25.12-26.6) with CVSS 9.9, allowing low-privileged remote attackers to compromise the product and impact additional systems. Exploitation details are not provided in the documents; consult Oracle's August 2026 securit...

CVE-2026-62587

CVE-2026-62587 affects the Data Archival component of Oracle Siebel CRM Administration (versions 25.12–26.6). A low-privileged attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data (high confidentiality impact) and perform unauthorized u...

CVE-2026-62584

CVE-2026-62584 affects Oracle Hyperion Infrastructure Technology (component: Installation and Configuration ), version 11.2.25.0.000 . An unauthenticated attacker with local logon to the host infrastructure can exploit this vulnerability to gain unauthorized read access to a subset of accessible ...

CVE-2026-62583

The vulnerability affects Oracle Hyperion Infrastructure Technology version 11.2.25.0.000, specifically the Installation and Configuration component. CVSS 3.1 scores it LOW (3.0) requiring high privileges and local access; successful exploitation permits unauthorized data modification and partial...

CVE-2026-62585

Oracle Siebel CRM Administration (component: Data Archival), versions 25.12-26.6, is vulnerable to unauthenticated remote takeover via HTTP (CVSS 9.8). Oracle's August 2026 Critical Patch Update at https://www.oracle.com/security-alerts/cspuaug2026.html addresses it. No in-the-wild exploitation o...

CVE-2026-62582

Oracle Hyperion Calculation Manager 11.2.25.0.000 has a critical Security-component flaw (CVSS 9.6) exploitable via HTTP by low-privileged attackers, enabling unauthorized data access and modification with scope change to other products. No exploit code is available. Apply the Oracle August 2026 ...

CVE-2026-62581

Oracle Hyperion Infrastructure Technology version 11.2.25.0.000, specifically the Installation and Configuration component, is vulnerable to a locally exploitable flaw. A low-privileged attacker with local system access can achieve full compromise (C/H/I/H/A), as scored CVSS 7.8 HIGH. Oracle's Au...

CVE-2026-62580

CVE-2026-62580 affects Oracle Hyperion Calculation Manager 11.2.25.0.000 Security component. A low-privileged attacker with physical network access can perform unauthorized update/insert/delete on some accessible data (CVSS 2.6, Low). No fix version or exploit details are provided in the documents.

CVE-2026-62577

CVE-2026-62577 affects Oracle Hyperion Infrastructure Technology 11.2.25.0.000, specifically the Installation and Configuration component. A low-privileged local attacker can gain unauthorized update, insert, or delete access to some accessible data (CVSS 3.3 LOW). Patch details are not provided ...

CVE-2026-62578

Oracle Hyperion Calculation Manager 11.2.25.0.000 (Security component) is affected by a medium-severity flaw exploitable by an unauthenticated attacker on an adjacent network segment, enabling unauthorized access to all accessible data. No exploit or patch details are provided; monitoring Oracle'...

CVE-2026-62579

Oracle Hyperion Infrastructure Technology (component: Installation and Configuration ) is affected in version 11.2.25.0.000 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability with low complexity to gain unauthorized read access to a subset of accessible data...

CVE-2026-62576

Oracle Hyperion Infrastructure Technology version 11.2.25.0.000, specifically its Installation and Configuration component, is vulnerable to a network-based, unauthenticated attack via TLS that can compromise confidentiality and integrity of accessible data. CVSS 3.1 scores 6.5 (Medium). No in-th...