Live feed · cooey

2026-08-18 NVD CVE

CVE-2026-70977: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience CRITICAL

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily...

availability-impactcve-2026-70977cvss-31data-creationdata-deletiondata-modificationdosdose-attack

2026-08-18 NVD CVE

CVE-2026-15748: The Forminator Forms plugin for WordPress is vulnerable to Arbitrary File Upload CRITICAL

The Forminator Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.56.1 via the handle_file_upload function. This is due to insufficient file type validation in...

arbitrary-files-uploadcve-2026-15748executable-filefile-validationfiles-uploadforminatormime-typenvd-cve

2026-08-18 NVD CVE

CVE-2026-70668: Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middlewar CRITICAL

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability...

confidentiality-impactcve-2026-70668cvss-31data-compromiseintegrity-impactnvd-cveoracleoracle-fusion-middleware

2026-08-18 NVD CVE

CVE-2026-62633: Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middlewar CRITICAL

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability...

availabilityconfidentialitycve-2026-62633cvss-31httpintegritynetwork-accessnvd-cve

2026-08-18 NVD CVE

CVE-2026-70741: Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyper CRITICAL

Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows...

2026-08-18 NVD CVE

CVE-2026-70739: Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyper CRITICAL

Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows...

availabilityconfidentialitycve-2026-70739cvss-31httpintegritynetwork-accessnvd-cve

2026-08-18 NVD CVE

CVE-2026-70740: Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyper CRITICAL

Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows...

2026-08-18 NVD CVE

CVE-2026-62634: Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middlewar CRITICAL

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability...

availability-impactconfidentiality-impactcorbacve-2026-62634cvss-31cvss-98integrity-impactnetwork-access

2026-08-18 NVD CVE

CVE-2026-70730: Vulnerability in the Oracle Hyperion Profitability and Cost Management product o CRITICAL

Vulnerability in the Oracle Hyperion Profitability and Cost Management product of Oracle Hyperion (component: Deployment). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability...

confidentiality-impactcritical-datacve-2026-70730cvss-31data-compromisehttphyperion-profitability-and-costs-managementintegrity-impact

2026-08-18 NVD CVE

CVE-2026-62635: Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middlewar CRITICAL

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability...

availabilityconfidentialitycve-2026-62635cvss-31httpintegritynetwork-accessnvd-cve

2026-08-18 NVD CVE

CVE-2026-70689: Vulnerability in Oracle Essbase (component: Infrastructure). The supported ver CRITICAL

Vulnerability in Oracle Essbase (component: Infrastructure). The supported version that is affected is 21.8.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

availabilityconfidentialitycve-2026-70689cvss-31cvss-98httpinfrastructureintegrity

2026-08-18 NVD CVE

CVE-2026-70745: Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyper CRITICAL

Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows...

2026-08-18 NVD CVE

CVE-2026-71065: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp CRITICAL

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 3.2.18. Easily exploitable vulnerability allows unauthenticated...

2026-08-18 NVD CVE

CVE-2026-62630: Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middlewar CRITICAL

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability...

availabilityconfidentialitycve-2026-62630cvss-31integritynetwork-accessnvd-cveoracle-fusion-middleware

2026-08-18 NVD CVE

CVE-2026-71152: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp CRITICAL

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 4.5.0. Easily exploitable vulnerability allows unauthenticated attacker...

2026-08-18 NVD CVE

CVE-2026-70817: Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype CRITICAL

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows...

2026-08-18 NVD CVE

CVE-2026-62637: Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middlewar CRITICAL

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability...

2026-08-18 NVD CVE

CVE-2026-62632: Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middlewar CRITICAL

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability...

availabilityconfidentialitycve-2026-62632cvss-31httpintegritynetwork-accessnvd-cve

2026-08-18 NVD CVE

CVE-2026-70979: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience CRITICAL

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily...

2026-08-18 NVD CVE

CVE-2026-70978: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience CRITICAL

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily...

2026-08-18 NVD CVE

CVE-2026-70953: Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (compon CRITICAL

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows...

2026-08-18 NVD CVE

CVE-2026-70954: Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (compon CRITICAL

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows...

availabilityconfidentialitycve-2026-70954cvss-31cvss-98dynamo-application-frameworkhttpintegrity

2026-08-18 NVD CVE

CVE-2026-62626: Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middlewar CRITICAL

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability...

2026-08-18 NVD CVE

CVE-2026-71014: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience CRITICAL

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0....

2026-08-18 NVD CVE

CVE-2026-70958: Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle CRITICAL

Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable...

nvd-cve

2026-08-18 NVD CVE

CVE-2026-70926: Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (compone CRITICAL

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows...

availabilitycompromiseconfidentialitycve-2026-70926cvss-31cvss-98integritynetwork-access

2026-08-18 NVD CVE

CVE-2026-71036: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience CRITICAL

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Manager). The supported version that is affected is 11.4.0. Easily...

2026-08-18 NVD CVE

CVE-2026-71015: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience CRITICAL

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0....

2026-08-18 NVD CVE

CVE-2026-60990: Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion CRITICAL

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability...

cve-2026-60990cvss-31cvss-99network-securitynvd-cveoracleoracle-fusionoracle-identity-manager-connector

2026-08-18 NVD CVE

CVE-2026-60977: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware CRITICAL

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable...

availability-impactconfidentiality-impactcve-2026-60977cvss-31integrity-impactnetwork-accessnvd-cveoracle

2026-08-18 NVD CVE

CVE-2026-70670: Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middlewar CRITICAL

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability...

2026-08-18 NVD CVE

CVE-2026-70846: Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (comp CRITICAL

Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (component: Internal Operations). Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows low...

2026-08-18 NVD CVE

CVE-2026-70673: Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middlewar CRITICAL

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability...

confidentiality-impactcve-2026-70673cvss-31data-compromisehttpintegrity-impactnetwork-accessnvd-cve

2026-08-18 NVD CVE

CVE-2026-61003: Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middl CRITICAL

Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable...

availability-impactconfidentiality-impactcve-2026-61003cvss-31data-breachesiiop-protocolintegrity-impactnetworks-vulnerabilities

2026-08-18 NVD CVE

CVE-2026-70920: Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype CRITICAL

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low...

2026-08-18 NVD CVE

CVE-2026-61272: Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards CRITICAL

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are 9.2.0.0-9.2.26.4. Easily exploitable vulnerability allows...

availabilityconfidentialitycve-2026-61272cvss-31httpintegrityjd-edwardsjd-edwards-enterpriseone-tools

2026-08-18 NVD CVE

CVE-2026-70976: Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience CRITICAL

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily...

availability-impactcontent-acquisition-systemscve-2026-70976cvss-31data-creationdata-deletiondata-modificationdos

2026-08-18 NVD CVE

CVE-2026-61248: Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middlewa CRITICAL

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability...

availabilitycompromiseconfidentialitycve-2026-61248cvss-31integrityldaplow-privileged-attacker

2026-08-18 NVD CVE

CVE-2026-62629: Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middlewar CRITICAL

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability...

cve-2026-62629data-compromisedata-creationdata-deletiondata-modificationdata-readdosdose-attack

2026-08-18 NVD CVE

CVE-2026-70921: Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype CRITICAL

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows...