CVE-2026-62461

Oracle Hyperion Calculation Manager version 11.2.25.0.000 has a Security component flaw exploitable by an unauthenticated remote attacker over HTTP, requiring victim interaction, that can lead to unauthorized read access to a subset of application data (CVSS 3.1 LOW, C:L/I:N/A:N). The Oracle Augu...

CVE-2026-62458

Oracle E-Business Suite (component: Internal Operations of Work in Process) versions 12.2.3–12.2.15 are affected by a HIGH-severity (CVSS 7.1) vulnerability exploitable over HTTP by a low-privileged attacker, enabling denial-of-service (hang/crash) and unauthorized data modification. No in-the-wi...

CVE-2026-62459

CVE-2026-62459 affects Oracle Hyperion Calculation Manager Security component at version 11.2.25.0.000, scored HIGH (CVSS 7.2) with scope change, enabling network-based attacks with high privileges to compromise confidentiality, integrity and availability. No exploitation details are provided; Or...

CVE-2026-62454

Oracle Siebel CRM's Siebel Cloud Manager component (versions 22.3–26.6) is vulnerable to a local privilege escalation attack. A low-privileged attacker with infrastructure access can achieve full application takeover, impacting confidentiality, integrity, and availability (CVSS 7.8 HIGH). Exploit...

CVE-2026-62455

CVE-2026-62455 affects Oracle Siebel CRM Cloud Applications (component: Siebel Cloud Manager ), versions 22.3–26.6 . A low-privileged attacker with network access via HTTP can exploit this vulnerability without user interaction to achieve unauthorized creation, deletion, or modification of critic...

CVE-2026-62457

Oracle's August 2026 Critical Patch Update (CSP) addresses CVE-2026-62457, a critical unauthenticated remote takeover flaw in the Common Events component of Oracle Hyperion Infrastructure Technology, affecting version 11.2.25.0.000; no patch version is specified in the provided documents. Exploit...

CVE-2026-62450

Oracle E-Business Suite (Flow Manufacturing, Internal Operations) component is vulnerable across versions 12.2.3–12.2.15. A low-privileged attacker with HTTP network access can exploit it easily, achieving full Confidentiality, Integrity, and Availability compromise (CVSS 8.8 HIGH). Oracle's Augu...

CVE-2026-62452

Affected component: Siebel Cloud Manager in Oracle Siebel CRM (versions 22.3–26.6). An unauthenticated network attacker can read all accessible CRM data, modify some data, and cause partial DoS. No patch version or exploit details are provided; see Oracle's August 2026 security advisory for remed...

CVE-2026-62449

Oracle Work in Process (component: Internal Operations) in Oracle E-Business Suite versions 12.2.3–12.2.15 has a local privilege escalation flaw rated CVSS 7.0 (HIGH), allowing a low-privileged attacker with host access to compromise the product with full confidentiality, integrity, and availabil...

CVE-2026-62446

An unauthenticated, network-accessible HTTP vulnerability in Oracle Hyperion Calculation Manager version 11.2.25.0.000 allows attackers to read a subset of accessible data. CVSS 3.1 scores it MEDIUM (5.3). Exploitation details and remediation patches are not provided in the documents; monitor Ora...

CVE-2026-62442

Siebel Cloud Manager (component of Oracle Siebel CRM, versions 22.3–26.6) is vulnerable to an easily exploitable flaw allowing an unauthenticated attacker with access to the physical communication segment to compromise the application, resulting in unauthorized creation, deletion, or modification...

CVE-2026-62448

Oracle Email Center's Message Component (E-Business Suite 12.2.3–12.2.15) has a HIGH-severity flaw (CVSS 8.2): an unauthenticated, network-accessible HTTP attacker can gain full data read access and partial write access via human interaction, with scope change potentially affecting additional pro...

CVE-2026-61342

CVE-2026-61342 affects Oracle Hyperion Calculation Manager version 11.2.25.0.000, specifically its Security component. An unauthenticated attacker with network HTTP access can exploit it with high attack complexity and user interaction to gain unauthorized access to critical or all accessible dat...

CVE-2026-62441

Oracle Hyperion Calculation Manager 11.2.25.0.000 has an easily exploitable Security-component flaw; a low-privilege network attacker via HTTP can gain unauthorized read and write access to some application data. Oracle's CSPU August 2026 advisory likely contains remediation details.

CVE-2026-61341

Oracle Siebel CRM Cloud Manager (versions 22.3-26.6) has an easily exploitable vulnerability allowing low-privileged, network-based attackers to fully compromise the application. CVSS 3.1 scores 8.8 (HIGH) for confidentiality, integrity, and availability impact. CISA SSVC confirms no known exploi...

CVE-2026-61340

CVE-2026-61340 affects the Oracle MES for Process Manufacturing component (Internal Operations) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability, though successful exploitation requires user ...

CVE-2026-61339

CVE-2026-61339 affects Oracle Siebel CRM's Siebel Cloud Manager component (versions 22.3-26.6) with a HIGH-severity (CVSS 7.3) local attack vector allowing a low-privileged attacker to read all accessible CRM data and perform unauthorized updates; exploitation details are not provided in the docu...

CVE-2026-61331

Oracle E-Business Suite's Financials Common Modules (component: Common Components), versions 12.2.3 through 12.2.15, has an easily exploitable vulnerability allowing low-privileged, network-based HTTP attackers to gain unauthorized access to critical or all accessible data (CVSS 3.1: 7.7 HIGH, co...

CVE-2026-61332

Oracle Siebel CRM Cloud Manager (versions 22.3-26.6) has an easily exploitable vulnerability allowing a high-privileged attacker with network HTTP access to compromise Siebel CRM Cloud Applications, enabling unauthorized creation, deletion, or modification of critical data. No exploitation or pat...

CVE-2026-61330

Oracle Siebel CRM's Siebel Cloud Manager component (versions 22.3-26.6) has a HIGH-severity (CVSS 8.8) network-exploitable flaw; a low-privileged attacker via HTTP can fully compromise the application. No exploitation details provided. Apply Oracle's August 2026 CPU patch (cspuaug2026.html).