CVE-2026-70697

CVE-2026-70697 affects Oracle Agile Engineering Data Management 6.2.1, specifically the Engineering Communication Interface component. A low-privileged attacker with local access can exploit this HIGH-severity (CVSS 7.0) flaw to fully compromise the application. Oracle's August 2026 security advi...

CVE-2026-70698

Oracle Agile Engineering Data Management 6.2.1 (Install component) is vulnerable to local privilege escalation by a high-privileged attacker, enabling full product takeover. CVSS 3.1 base score 6.7 (AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). No exploitation details provided; Oracle security advisory r...

CVE-2026-70695

CVE-2026-70695 affects the File Transmission component of Oracle Payments within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A high-privileged attacker with network access via HTTP can exploit this vulnerability to perform unauthorized creation, deletion, or modification of critic...

CVE-2026-70694

CVE-2026-70694 affects the File Transmission component of Oracle Payments in Oracle E-Business Suite, versions 12.2.3 through 12.2.15 . A high-privileged attacker with network access via HTTP can exploit this vulnerability, though it is rated as difficult to exploit (high attack complexity). Due ...

CVE-2026-70696

Oracle Payments (component: File Transmission) in Oracle E-Business Suite versions 12.2.3–12.2.15 is vulnerable to an unauthenticated, network-based TCP attack (CVSS 7.5 HIGH). Successful exploitation grants unauthorized access to critical data or full Oracle Payments dataset, impacting confident...

CVE-2026-70691

Oracle Agile Engineering Data Management 6.2.1's Engineering Communication Interface has a HIGH-severity (CVSS 7.5) flaw: an unauthenticated attacker with physical access to the communication segment can fully compromise the application (C/I/A impacts). No patch version is specified; Oracle's Aug...

CVE-2026-70693

Oracle Agile Engineering Data Management (version 6.2.1) component Engineering Communication Interface has a local, high-complexity vulnerability requiring high privileges and human interaction; successful exploitation yields full system takeover (CVSS 6.3 MEDIUM). No exploit code or patch detail...

CVE-2026-70692

A HIGH-severity vulnerability (CVSS 7.7) in Oracle E-Business Suite's Marketing Encyclopedia System (component: Internal Operations) affects versions 12.2.3-12.2.15. A low-privileged network attacker via HTTP can gain unauthorized access to all MES-accessible data, with potential scope change imp...

CVE-2026-70689

Oracle Essbase 21.8.1.0.0 (Infrastructure component) has a critical CVSS 9.8 flaw exploitable by an unauthenticated attacker over HTTP, leading to full system takeover. No exploit details or confirmed in-the-wild exploitation are provided; Oracle's August 2026 CPU patches this issue.

CVE-2026-70690

CVE-2026-70690 is a vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite , specifically in the US Payroll - General component. Affected versions are 12.2.3 through 12.2.15 . The vulnerability is difficult to exploit and requires a high-privileged attacker with network access v...

CVE-2026-70688

Oracle Essbase 21.8.1.0.0 Calculator component is affected by an easily exploitable vulnerability allowing low-privileged network attackers via HTTP to fully compromise the application (CVSS 8.8 HIGH). Oracle's August 2026 security alert is the primary reference; no exploitation evidence is provi...

CVE-2026-70687

CVE-2026-70687 affects the Oracle Marketing product (component: Audience ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data or complete access to all Orac...

CVE-2026-70685

Affected component: Oracle Hyperion Calculation Manager Security component, version 11.2.25.0.000. Root cause: unauthenticated attacker with local infrastructure access can compromise the application. Impact: high confidentiality breach and low integrity impact, with scope change affecting additi...

CVE-2026-70684

Vulnerability in Oracle Enterprise Manager Base Platform's Agent Next Gen component (versions 13.5 and 24.1) allows unauthenticated remote attackers via HTTP to fully compromise the platform. CVSS 3.1 base score is 8.1 (High), with high confidentiality, integrity, and availability impact. No spec...

CVE-2026-70686

Oracle E-Business Suite General Ledger (component: Internal Operations), versions 12.2.3–12.2.15, is vulnerable to an easily exploitable HTTP-based flaw allowing a low-privileged attacker to fully compromise the application (CVSS 8.8 High). No exploitation details are provided; see Oracle's CSPU ...

CVE-2026-70683

Oracle Hyperion Calculation Manager 11.2.25.0.000 has an unauthenticated, easily exploitable Security component flaw via HTTP requiring human interaction; successful attacks cause unauthorized update/insert/delete access to some accessible data. Exploitation details not provided. Patch status not...

CVE-2026-70682

Oracle Hyperion Calculation Manager 11.2.25.0.000 has a LOW-severity (CVSS 3.7) flaw in its Security component, exploitable remotely via HTTP by unauthenticated attackers to gain limited unauthorized read access to application data. No exploit details or patch version are provided in the document...

CVE-2026-70679

Oracle Hyperion Calculation Manager 11.2.25.0.000 has an easily exploitable flaw in its Security component; an unauthenticated remote attacker via HTTP can gain unauthorized update/insert/delete access to application data (CVSS 5.3, integrity-only impact). Patch status is not specified in the pro...

CVE-2026-70678

Oracle Hyperion Calculation Manager version 11.2.25.0.000 (Security component) is affected by a vulnerability allowing a low-privileged attacker with network access via HTTP to compromise the product. Successful exploitation requires user interaction from a person other than the attacker. Due to ...

CVE-2026-70680

Oracle E-Business Suite "Internal Operations" component (versions 12.2.3–12.2.15) allows a low-privileged, network-attached attacker to read all accessible data and cause partial DoS; no exploit code or patch details are provided. Monitor Oracle's August 2026 security advisory for remediation gui...