CVE-2026-70690

CVE-2026-70690 is a vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite , specifically in the US Payroll - General component. Affected versions are 12.2.3 through 12.2.15 . The vulnerability is difficult to exploit and requires a high-privileged attacker with network access v...

CVE-2026-70688

Oracle Essbase 21.8.1.0.0 Calculator component is affected by an easily exploitable vulnerability allowing low-privileged network attackers via HTTP to fully compromise the application (CVSS 8.8 HIGH). Oracle's August 2026 security alert is the primary reference; no exploitation evidence is provi...

CVE-2026-70687

CVE-2026-70687 affects the Oracle Marketing product (component: Audience ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data or complete access to all Orac...

CVE-2026-70685

Affected component: Oracle Hyperion Calculation Manager Security component, version 11.2.25.0.000. Root cause: unauthenticated attacker with local infrastructure access can compromise the application. Impact: high confidentiality breach and low integrity impact, with scope change affecting additi...

CVE-2026-70684

Vulnerability in Oracle Enterprise Manager Base Platform's Agent Next Gen component (versions 13.5 and 24.1) allows unauthenticated remote attackers via HTTP to fully compromise the platform. CVSS 3.1 base score is 8.1 (High), with high confidentiality, integrity, and availability impact. No spec...

CVE-2026-70686

Oracle E-Business Suite General Ledger (component: Internal Operations), versions 12.2.3–12.2.15, is vulnerable to an easily exploitable HTTP-based flaw allowing a low-privileged attacker to fully compromise the application (CVSS 8.8 High). No exploitation details are provided; see Oracle's CSPU ...

CVE-2026-70683

Oracle Hyperion Calculation Manager 11.2.25.0.000 has an unauthenticated, easily exploitable Security component flaw via HTTP requiring human interaction; successful attacks cause unauthorized update/insert/delete access to some accessible data. Exploitation details not provided. Patch status not...

CVE-2026-70682

Oracle Hyperion Calculation Manager 11.2.25.0.000 has a LOW-severity (CVSS 3.7) flaw in its Security component, exploitable remotely via HTTP by unauthenticated attackers to gain limited unauthorized read access to application data. No exploit details or patch version are provided in the document...

CVE-2026-70679

Oracle Hyperion Calculation Manager 11.2.25.0.000 has an easily exploitable flaw in its Security component; an unauthenticated remote attacker via HTTP can gain unauthorized update/insert/delete access to application data (CVSS 5.3, integrity-only impact). Patch status is not specified in the pro...

CVE-2026-70678

Oracle Hyperion Calculation Manager version 11.2.25.0.000 (Security component) is affected by a vulnerability allowing a low-privileged attacker with network access via HTTP to compromise the product. Successful exploitation requires user interaction from a person other than the attacker. Due to ...

CVE-2026-70680

Oracle E-Business Suite "Internal Operations" component (versions 12.2.3–12.2.15) allows a low-privileged, network-attached attacker to read all accessible data and cause partial DoS; no exploit code or patch details are provided. Monitor Oracle's August 2026 security advisory for remediation gui...

CVE-2026-70681

Oracle E-Business Suite versions 12.2.3 through 12.2.15 are affected by a HIGH-severity (CVSS 7.5) vulnerability in the JRI and other Java utils components. An unauthenticated network attacker can, with human interaction, compromise the Oracle Applications DBA product and achieve full takeover (c...

CVE-2026-70677

CVE-2026-70677 affects Oracle Hyperion Calculation Manager (Security component) version 11.2.25.0.000, with CVSS 3.1 score 5.9 (MEDIUM). Exploitation requires an unauthenticated attacker with network HTTP access and human interaction, leading to unauthorized data access and limited modification. ...

CVE-2026-70676

The Oracle Hyperion Calculation Manager Security component (version 11.2.25.0.000) is vulnerable to a CVSS 7.0 HIGH-severity flaw exploitable via HTTP by an unauthenticated remote attacker with high attack complexity, enabling unauthorized data read/write and partial DoS. No exploit code or in-th...

CVE-2026-70675

Oracle Reports Developer 14.1.2.0.0 (Oracle Fusion Middleware, Security and Authentication component) is vulnerable to unauthenticated remote HTTP attacks leading to full system takeover. CVSS 3.1 scores 8.1 (HIGH). Oracle's August 2026 CPU patches this issue; NCSC recommends prioritizing the upd...

CVE-2026-70673

Oracle Reports Developer 14.1.2.0.0 (Oracle Fusion Middleware, Security and Authentication component) has a critical vulnerability exploitable by an unauthenticated attacker over HTTP, yielding CVSS 9.3 (C:H/I:L, scope change). Impact includes unauthorized read access to all product data and limi...

CVE-2026-70672

Affected product: Oracle Reports Developer 14.1.2.0.0 (Security and Authentication component). Root cause: an unauthenticated, network-accessible HTTP flaw (CVSS 7.4 HIGH) allows unauthorized creation, deletion, or modification of all accessible data and full data disclosure. Remediation: Oracle'...

CVE-2026-70674

CVE-2026-70674 affects Oracle Reports Developer 14.1.2.0.0 (component: Security and Authentication). An unauthenticated attacker with access to the physical communication segment can fully compromise the product (CVSS 8.8 HIGH). No exploit details are provided; refer to Oracle's August 2026 CPU a...

CVE-2026-70669

The vulnerability affects Oracle Reports Developer 14.1.2.0.0 (component: Security and Authentication) in Oracle Fusion Middleware. An unauthenticated attacker with HTTP network access can exploit it (CVSS 9.8, CRITICAL) to fully compromise the product (confidentiality, integrity, availability). ...

CVE-2026-70670

Oracle Fusion Middleware Reports Developer 14.1.2.0.0 (Security and Authentication component) has a critical CVSS 9.6 flaw exploitable by an unauthenticated attacker on the same physical network segment, enabling full product takeover with scope change affecting additional products. Oracle's Augu...