CyberSecBulletin

Oracle vulnerabilities

We track 3,014 vulnerabilities in Oracle products across 60+ products. 3,006 are rated high or critical, and 81 have been exploited in real attacks. The most recent was published on October 24, 2026.

3,014vulnerabilities
715critical
2,291high
81exploited
8.3average CVSS score

Latest Oracle vulnerabilities

  • 9.8 Critical severity

    Oracle Reports Developer: Improper Access Control

    CVE-2026-62614Oracle

    Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

  • 7.3 High severity

    Oracle Reports Developer: Improper Access Control

    CVE-2026-62613Oracle

    Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with access to t

  • 8.8 High severity

    Oracle Reports Developer: Improper Access Control

    CVE-2026-62612Oracle

    Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows low privileged attacker with network acce

  • 9.8 Critical severity

    Oracle Reports Developer: Improper Access Control

    CVE-2026-62611Oracle

    Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

  • 9.1 Critical severity

    Oracle Reports Developer: Improper Access Control

    CVE-2026-62610Oracle

    Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

  • 9.8 Critical severity

    Oracle Reports Developer: Improper Access Control

    CVE-2026-62609Oracle

    Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

  • 9.9 Critical severity

    Oracle Reports Developer: Improper Access Control

    CVE-2026-62608Oracle

    Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows low privileged attacker with network acce

  • 8.7 High severity

    Oracle Customer Care: Improper Access Control

    CVE-2026-62607Oracle

    Vulnerability in the Oracle Customer Care product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTT

  • 8.2 High severity

    Oracle Partner Management: Improper Access Control

    CVE-2026-62605Oracle

    Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access vi

  • 8.0 High severity

    Oracle Hyperion Calculation Manager: Improper Access Control

    CVE-2026-62602Oracle

    Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical c

  • 7.1 High severity

    Oracle Sales: Improper Access Control

    CVE-2026-62601Oracle

    Vulnerability in the Oracle Sales product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to comp

  • 8.1 High severity

    Oracle Sales: Improper Access Control

    CVE-2026-62600Oracle

    Vulnerability in the Oracle Sales product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to comp

  • 8.6 High severity

    Oracle Trading Community: Improper Access Control

    CVE-2026-62599Oracle

    Vulnerability in the Oracle Trading Community product of Oracle E-Business Suite (component: Third Party Data Integration). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network a

  • 8.2 High severity

    Oracle Hyperion Calculation Manager: Improper Access Control

    CVE-2026-62598Oracle

    Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via SFTP t

  • 8.5 High severity

    Siebel CRM Integration: Improper Access Control

    CVE-2026-62596Oracle

    Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versions that are affected are 25.12-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to comprom

  • 8.1 High severity

    Siebel CRM Integration: Improper Access Control

    CVE-2026-62595Oracle

    Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versions that are affected are 25.12-26.6. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communicat

  • 7.7 High severity

    Siebel CRM Integration: Improper Access Control

    CVE-2026-62594Oracle

    Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versions that are affected are 25.12-26.6. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to comp

  • 7.7 High severity

    Siebel CRM Integration: Improper Access Control

    CVE-2026-62593Oracle

    Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versions that are affected are 25.12-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to comprom

  • 9.8 Critical severity

    Siebel CRM Integration: Improper Access Control

    CVE-2026-62592Oracle

    Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versions that are affected are 25.12-26.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compro

  • 8.1 High severity

    Siebel CRM Integration: Improper Access Control

    CVE-2026-62591Oracle

    Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versions that are affected are 25.12-26.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compro

  • 8.5 High severity

    Siebel CRM Integration: Improper Access Control

    CVE-2026-62590Oracle

    Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versions that are affected are 25.12-26.6. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compr

  • 8.7 High severity

    Siebel CRM Integration: Improper Access Control

    CVE-2026-62589Oracle

    Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versions that are affected are 25.12-26.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to comp

  • 9.9 Critical severity

    Siebel CRM Integration: Improper Access Control

    CVE-2026-62588Oracle

    Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versions that are affected are 25.12-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to comprom

  • 7.1 High severity

    Siebel CRM Administration: Improper Access Control

    CVE-2026-62587Oracle

    Vulnerability in the Siebel CRM Administration product of Oracle Siebel CRM (component: Data Archival). Supported versions that are affected are 25.12-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to comprom

  • 8.6 High severity

    Siebel CRM Administration: Improper Access Control

    CVE-2026-62586Oracle

    Vulnerability in the Siebel CRM Administration product of Oracle Siebel CRM (component: Data Archival). Supported versions that are affected are 25.12-26.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compro

  • 9.8 Critical severity

    Siebel CRM Administration: Improper Access Control

    CVE-2026-62585Oracle

    Vulnerability in the Siebel CRM Administration product of Oracle Siebel CRM (component: Data Archival). Supported versions that are affected are 25.12-26.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compro

  • 9.6 Critical severity

    Oracle Hyperion Calculation Manager: Improper Access Control

    CVE-2026-62582Oracle

    Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to

  • 7.8 High severity

    Oracle Hyperion Infrastructure Technology: Improper Access Control

    CVE-2026-62581Oracle

    Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with

  • 7.7 High severity

    Oracle Hyperion Calculation Manager: Improper Access Control

    CVE-2026-62571Oracle

    Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to

  • 7.5 High severity

    Oracle Hyperion Infrastructure Technology: Improper Access Control

    CVE-2026-62554Oracle

    Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker wit

  • 7.5 High severity

    Oracle Hyperion Infrastructure Technology: Improper Access Control

    CVE-2026-62552Oracle

    Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker wit

  • 7.3 High severity

    Oracle Hyperion Infrastructure Technology: Improper Access Control

    CVE-2026-62551Oracle

    Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker wit

  • 7.5 High severity

    Oracle Hyperion Infrastructure Technology: Improper Access Control

    CVE-2026-62550Oracle

    Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker wit

  • 7.5 High severity

    Oracle Hyperion Infrastructure Technology: Improper Access Control

    CVE-2026-62545Oracle

    Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker w

  • 9.8 Critical severity

    Oracle Hyperion Infrastructure Technology: Improper Access Control

    CVE-2026-62544Oracle

    Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker wit

  • 9.8 Critical severity

    Oracle Hyperion Infrastructure Technology: Improper Access Control

    CVE-2026-62543Oracle

    Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker wit

  • 9.8 Critical severity

    Oracle Hyperion Infrastructure Technology: Improper Access Control

    CVE-2026-62541Oracle

    Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker wit

  • 7.2 High severity

    Oracle Cost Management: Improper Access Control

    CVE-2026-62540Oracle

    Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to

  • 9.8 Critical severity

    Oracle Hyperion Infrastructure Technology: Improper Access Control

    CVE-2026-62539Oracle

    Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker wit

  • 7.4 High severity

    Oracle Hyperion Infrastructure Technology: Improper Access Control

    CVE-2026-62538Oracle

    Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker w