CyberSecBulletin

Oracle vulnerabilities

We track 3,014 vulnerabilities in Oracle products across 60+ products. 3,006 are rated high or critical, and 81 have been exploited in real attacks. The most recent was published on October 24, 2026.

3,014vulnerabilities
715critical
2,291high
81exploited
8.3average CVSS score

Latest Oracle vulnerabilities

  • 8.7 High severity

    Oracle Hyperion Data Relationship Management: Improper Access Control

    CVE-2026-70903Oracle

    Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network

  • 7.1 High severity

    Oracle Hyperion Data Relationship Management: Improper Access Control

    CVE-2026-70902Oracle

    Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon t

  • 8.1 High severity

    Oracle Hyperion Data Relationship Management: Improper Access Control

    CVE-2026-70901Oracle

    Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with networ

  • 8.7 High severity

    Oracle Hyperion Data Relationship Management: Improper Access Control

    CVE-2026-70900Oracle

    Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with netw

  • 8.8 High severity

    Oracle Hyperion Data Relationship Management: Improper Access Control

    CVE-2026-70899Oracle

    Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network

  • 7.4 High severity

    Oracle Hyperion Data Relationship Management: Improper Access Control

    CVE-2026-70898Oracle

    Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with netw

  • 8.2 High severity

    Oracle Hyperion Data Relationship Management: Improper Access Control

    CVE-2026-70897Oracle

    Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with networ

  • 7.5 High severity

    Oracle Hyperion Data Relationship Management: Improper Access Control

    CVE-2026-70896Oracle

    Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with networ

  • 7.1 High severity

    Oracle Hyperion Data Relationship Management: Improper Access Control

    CVE-2026-70894Oracle

    Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with logon

  • 8.2 High severity

    Oracle Hyperion Data Relationship Management: Improper Access Control

    CVE-2026-70893Oracle

    Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with netwo

  • 8.2 High severity

    Oracle Hyperion Data Relationship Management: Improper Access Control

    CVE-2026-70892Oracle

    Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with netwo

  • 7.5 High severity

    Oracle Hyperion Data Relationship Management: Improper Access Control

    CVE-2026-70891Oracle

    Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with networ

  • 7.5 High severity

    Oracle Hyperion Data Relationship Management: Improper Access Control

    CVE-2026-70890Oracle

    Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with networ

  • 7.5 High severity

    Oracle Hyperion Data Relationship Management: Improper Access Control

    CVE-2026-70889Oracle

    Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with networ

  • 8.2 High severity

    Oracle Hyperion Data Relationship Management: Improper Access Control

    CVE-2026-70887Oracle

    Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with networ

  • 8.8 High severity

    Oracle Hyperion Data Relationship Management: Improper Access Control

    CVE-2026-70886Oracle

    Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network

  • 8.5 High severity

    Oracle Hyperion Data Relationship Management: Improper Access Control

    CVE-2026-70885Oracle

    Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with netwo

  • 9.1 Critical severity

    Oracle Hyperion Data Relationship Management: Improper Access Control

    CVE-2026-70884Oracle

    Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with networ

  • 9.1 Critical severity

    Oracle Hyperion Data Relationship Management: Improper Access Control

    CVE-2026-70883Oracle

    Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with networ

  • 8.7 High severity

    Oracle Hyperion Data Relationship Management: Improper Access Control

    CVE-2026-70882Oracle

    Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network

  • 8.1 High severity

    Oracle Hyperion Data Relationship Management: Improper Access Control

    CVE-2026-70881Oracle

    Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network

  • 10.0 Critical severity

    Oracle Hyperion Data Relationship Management: Improper Access Control

    CVE-2026-70880Oracle

    Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with networ

  • 7.8 High severity

    Oracle Hyperion Data Relationship Management: Improper Access Control

    CVE-2026-70879Oracle

    Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with logon

  • 8.1 High severity

    Oracle Hyperion Data Relationship Management: Improper Access Control

    CVE-2026-70878Oracle

    Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network

  • 8.8 High severity

    Oracle Hyperion Data Relationship Management: Improper Access Control

    CVE-2026-70877Oracle

    Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network

  • 9.1 Critical severity

    Oracle Hyperion Data Relationship Management: Improper Access Control

    CVE-2026-70876Oracle

    Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with networ

  • 7.5 High severity

    Oracle Hyperion Data Relationship Management: Improper Access Control

    CVE-2026-70875Oracle

    Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with netwo

  • 8.8 High severity

    Oracle Hyperion Data Relationship Management: Improper Access Control

    CVE-2026-70874Oracle

    Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network

  • 9.8 Critical severity

    Oracle Hyperion Data Relationship Management: Improper Access Control

    CVE-2026-70873Oracle

    Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with networ

  • 9.1 Critical severity

    Oracle Hyperion Data Relationship Management: Improper Access Control

    CVE-2026-70872Oracle

    Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with networ

  • 9.8 Critical severity

    Oracle Hyperion Data Relationship Management: Improper Access Control

    CVE-2026-70871Oracle

    Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with networ

  • 8.2 High severity

    Oracle Hyperion Data Relationship Management: Improper Access Control

    CVE-2026-70870Oracle

    Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Web Client - Unicode). The supported version that is affected is 11.2.23.0.000. Easily exploitable vulnerability allows unauthenticated attacker with netwo

  • 8.1 High severity

    Oracle Application Testing Suite: Improper Access Control

    CVE-2026-70868Oracle

    Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Testing Suite. Successful at

  • 7.1 High severity

    Oracle Application Testing Suite: Improper Access Control

    CVE-2026-70867Oracle

    Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle

  • 7.8 High severity

    Oracle Application Testing Suite: Improper Access Control

    CVE-2026-70866Oracle

    Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker having Load Testing for Web Apps privilege with logon to the infrastructure where Oracle Appl

  • 7.5 High severity

    Oracle Application Testing Suite: Improper Access Control

    CVE-2026-70865Oracle

    Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Difficult to exploit vulnerability allows low privileged attacker having Load Testing for Web Apps privilege with network access via HTTPS to compromise Orac

  • 7.6 High severity

    Oracle Application Testing Suite: Improper Access Control

    CVE-2026-70864Oracle

    Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker having Load Testing for Web Apps privilege with network access via HTTP to compromise Oracle

  • 8.8 High severity

    Oracle Application Testing Suite: Improper Access Control

    CVE-2026-70863Oracle

    Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker having Load Testing for Web Apps privilege with network access via HTTPS to compromise Oracle

  • 9.1 Critical severity

    Oracle Application Testing Suite: Improper Access Control

    CVE-2026-70862Oracle

    Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Testing Suite. Successful atta

  • 7.2 High severity

    PeopleSoft Enterprise FIN Common Objects Brazil: Improper Access Control

    CVE-2026-70861Oracle

    Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Common Objects). The supported version that is affected is 9.1. Easily exploitable vulnerability allows high privileged attacker with network access v