CVE-2026-70700

CVE-2026-70700 affects the Oracle Payables product of Oracle E-Business Suite (component: Internal Operations ), versions 12.2.3 through 12.2.15 . An unauthenticated attacker with network access via HTTP can trigger a hang or frequently repeatable crash, resulting in a complete denial of service ...

CVE-2026-70701

Affected: Oracle E-Business Suite Payables, component Internal Operations, versions 12.2.3–12.2.15. A low-privileged network attacker can compromise Payables data confidentiality and integrity (CVSS 8.1, HIGH). Exploitation details are not provided. Apply Oracle Critical Patch Update referenced a...

CVE-2026-70699

CVE-2026-70699 affects Oracle E-Business Suite Payments (File Transmission component), versions 12.2.3–12.2.15. An unauthenticated network attacker can exploit it to gain unauthorized read/write access to critical Payments data. CVSS 7.4 (HIGH); no in-the-wild exploitation reported. Patch details...

CVE-2026-70698

Oracle Agile Engineering Data Management 6.2.1 (Install component) is vulnerable to local privilege escalation by a high-privileged attacker, enabling full product takeover. CVSS 3.1 base score 6.7 (AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). No exploitation details provided; Oracle security advisory r...

CVE-2026-70697

CVE-2026-70697 affects Oracle Agile Engineering Data Management 6.2.1, specifically the Engineering Communication Interface component. A low-privileged attacker with local access can exploit this HIGH-severity (CVSS 7.0) flaw to fully compromise the application. Oracle's August 2026 security advi...

CVE-2026-70695

CVE-2026-70695 affects the File Transmission component of Oracle Payments within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A high-privileged attacker with network access via HTTP can exploit this vulnerability to perform unauthorized creation, deletion, or modification of critic...

CVE-2026-70694

CVE-2026-70694 affects the File Transmission component of Oracle Payments in Oracle E-Business Suite, versions 12.2.3 through 12.2.15 . A high-privileged attacker with network access via HTTP can exploit this vulnerability, though it is rated as difficult to exploit (high attack complexity). Due ...

CVE-2026-70696

Oracle Payments (component: File Transmission) in Oracle E-Business Suite versions 12.2.3–12.2.15 is vulnerable to an unauthenticated, network-based TCP attack (CVSS 7.5 HIGH). Successful exploitation grants unauthorized access to critical data or full Oracle Payments dataset, impacting confident...

CVE-2026-70693

Oracle Agile Engineering Data Management (version 6.2.1) component Engineering Communication Interface has a local, high-complexity vulnerability requiring high privileges and human interaction; successful exploitation yields full system takeover (CVSS 6.3 MEDIUM). No exploit code or patch detail...

CVE-2026-70691

Oracle Agile Engineering Data Management 6.2.1's Engineering Communication Interface has a HIGH-severity (CVSS 7.5) flaw: an unauthenticated attacker with physical access to the communication segment can fully compromise the application (C/I/A impacts). No patch version is specified; Oracle's Aug...

CVE-2026-70692

A HIGH-severity vulnerability (CVSS 7.7) in Oracle E-Business Suite's Marketing Encyclopedia System (component: Internal Operations) affects versions 12.2.3-12.2.15. A low-privileged network attacker via HTTP can gain unauthorized access to all MES-accessible data, with potential scope change imp...

CVE-2026-70689

Oracle Essbase 21.8.1.0.0 (Infrastructure component) has a critical CVSS 9.8 flaw exploitable by an unauthenticated attacker over HTTP, leading to full system takeover. No exploit details or confirmed in-the-wild exploitation are provided; Oracle's August 2026 CPU patches this issue.

CVE-2026-70690

CVE-2026-70690 is a vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite , specifically in the US Payroll - General component. Affected versions are 12.2.3 through 12.2.15 . The vulnerability is difficult to exploit and requires a high-privileged attacker with network access v...

CVE-2026-70688

Oracle Essbase 21.8.1.0.0 Calculator component is affected by an easily exploitable vulnerability allowing low-privileged network attackers via HTTP to fully compromise the application (CVSS 8.8 HIGH). Oracle's August 2026 security alert is the primary reference; no exploitation evidence is provi...

CVE-2026-70687

CVE-2026-70687 affects the Oracle Marketing product (component: Audience ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data or complete access to all Orac...

CVE-2026-70685

Affected component: Oracle Hyperion Calculation Manager Security component, version 11.2.25.0.000. Root cause: unauthenticated attacker with local infrastructure access can compromise the application. Impact: high confidentiality breach and low integrity impact, with scope change affecting additi...

CVE-2026-70684

Vulnerability in Oracle Enterprise Manager Base Platform's Agent Next Gen component (versions 13.5 and 24.1) allows unauthenticated remote attackers via HTTP to fully compromise the platform. CVSS 3.1 base score is 8.1 (High), with high confidentiality, integrity, and availability impact. No spec...

CVE-2026-70686

Oracle E-Business Suite General Ledger (component: Internal Operations), versions 12.2.3–12.2.15, is vulnerable to an easily exploitable HTTP-based flaw allowing a low-privileged attacker to fully compromise the application (CVSS 8.8 High). No exploitation details are provided; see Oracle's CSPU ...

CVE-2026-70683

Oracle Hyperion Calculation Manager 11.2.25.0.000 has an unauthenticated, easily exploitable Security component flaw via HTTP requiring human interaction; successful attacks cause unauthorized update/insert/delete access to some accessible data. Exploitation details not provided. Patch status not...

CVE-2026-70682

Oracle Hyperion Calculation Manager 11.2.25.0.000 has a LOW-severity (CVSS 3.7) flaw in its Security component, exploitable remotely via HTTP by unauthenticated attackers to gain limited unauthorized read access to application data. No exploit details or patch version are provided in the document...