By publication date

Exploited and new serious CVEs: August 2026

6,848 records · 20 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 40 of 69

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
32Monitor	CVE-2026-70901No exploit	Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).oracle · hyperion data relationship management · CWE-284 Pre-auth Broken access control (IDOR)	High8.1	—	0.3%	Aug 18, 2026
28Monitor	CVE-2026-70902No exploit	Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).oracle · hyperion data relationship management · CWE-284 Local privilege escalation Broken access control (IDOR)	High7.1	—	0.1%	Aug 18, 2026
34Monitor	CVE-2026-70903No exploit	Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).oracle · hyperion data relationship management · CWE-284 Broken access control (IDOR)	High8.7	—	0.3%	Aug 18, 2026
32Monitor	CVE-2026-70904No exploit	Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).oracle · hyperion data relationship management · CWE-284 Pre-auth Broken access control (IDOR)	High8.1	—	0.3%	Aug 18, 2026
39Monitor	CVE-2026-70905No exploit	Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Agent infrastructure).oracle · access manager · CWE-287 Pre-auth Auth bypass	Critical9.8	—	0.5%	Aug 18, 2026
30Monitor	CVE-2026-70906No exploit	Vulnerability in Oracle Java SE (component: 2D).oracle corporation · oracle java se · CWE-400 Pre-auth Denial of service	High7.5	—	0.4%	Aug 18, 2026
30Monitor	CVE-2026-70908No exploit	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).oracle · helidon · CWE-400 Pre-auth Denial of service	High7.5	—	0.4%	Aug 18, 2026
32Monitor	CVE-2026-70909No exploit	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).oracle · hyperion financial management · CWE-284 Pre-auth Broken access control (IDOR)	High8.2	—	0.4%	Aug 18, 2026
30Monitor	CVE-2026-70910No exploit	Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST).oracle · siebel crm · CWE-284 Pre-auth Broken access control (IDOR)	High7.5	—	0.4%	Aug 18, 2026
28Monitor	CVE-2026-70914No exploit	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).oracle · hyperion financial management · CWE-284 Broken access control (IDOR)	High7.0	—	0.1%	Aug 18, 2026
35Monitor	CVE-2026-70918No exploit	Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Outbound Data).oracle · product hub · CWE-306 Auth bypass	High8.8	—	0.4%	Aug 18, 2026
39Monitor	CVE-2026-70920No exploit	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).oracle · hyperion financial management · CWE-284 Broken access control (IDOR)	Critical9.9	—	0.4%	Aug 18, 2026
40Plan	CVE-2026-70921No exploit	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).oracle · hyperion financial management · CWE-284 Pre-auth Broken access control (IDOR)	Critical10.0	—	0.4%	Aug 18, 2026
35Monitor	CVE-2026-70922No exploit	Vulnerability in the Oracle Financial Services Enterprise Case Management product of Oracle Financial Services Applications (component: Web oracle · financial services enterprise case management · CWE-287 Auth bypass	High8.8	—	0.4%	Aug 18, 2026
32Monitor	CVE-2026-70924No exploit	Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Security).oracle · web services manager · CWE-306 Pre-auth Auth bypass	High8.1	—	0.3%	Aug 18, 2026
32Monitor	CVE-2026-70925No exploit	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).oracle · hyperion financial management · CWE-284 Broken access control (IDOR)	High8.1	—	0.3%	Aug 18, 2026
39Monitor	CVE-2026-70926No exploit	Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer).oracle · workflow · CWE-306 Pre-auth Auth bypass	Critical9.8	—	0.5%	Aug 18, 2026
30Monitor	CVE-2026-70927No exploit	Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer).oracle · workflow · CWE-400 Pre-auth Denial of service	High7.5	—	0.4%	Aug 18, 2026
35Monitor	CVE-2026-70928No exploit	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).oracle · hyperion financial management · CWE-269	High8.8	—	0.4%	Aug 18, 2026
32Monitor	CVE-2026-70929No exploit	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).oracle · hyperion financial management · CWE-284 Broken access control (IDOR)	High8.1	—	0.3%	Aug 18, 2026
30Monitor	CVE-2026-70930No exploit	Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools).oracle · order management · CWE-306 Auth bypass	High7.5	—	0.3%	Aug 18, 2026
28Monitor	CVE-2026-70933No exploit	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).oracle · hyperion financial management · CWE-284 Broken access control (IDOR)	High7.1	—	0.3%	Aug 18, 2026
28Monitor	CVE-2026-70934No exploit	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).oracle · hyperion financial management · CWE-284 Broken access control (IDOR)	High7.1	—	0.3%	Aug 18, 2026
28Monitor	CVE-2026-70935No exploit	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).oracle · hyperion financial management · CWE-284 Broken access control (IDOR)	High7.1	—	0.3%	Aug 18, 2026
28Monitor	CVE-2026-70936No exploit	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).oracle · hyperion financial management · CWE-269 Local privilege escalation	High7.1	—	0.1%	Aug 18, 2026
30Monitor	CVE-2026-70937No exploit	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).oracle · hyperion financial management · CWE-269	High7.5	—	0.3%	Aug 18, 2026
28Monitor	CVE-2026-70939No exploit	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).oracle · hyperion financial management · CWE-269	High7.2	—	0.4%	Aug 18, 2026
35Monitor	CVE-2026-70940No exploit	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).oracle · hyperion financial management · CWE-269	High8.8	—	0.4%	Aug 18, 2026
35Monitor	CVE-2026-70941No exploit	Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).oracle · payroll · CWE-284 Local privilege escalation Broken access control (IDOR)	High8.8	—	0.1%	Aug 18, 2026
30Monitor	CVE-2026-70942No exploit	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).oracle · hyperion financial management · CWE-269	High7.7	—	0.3%	Aug 18, 2026
32Monitor	CVE-2026-70943No exploit	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).oracle · hyperion financial management · CWE-269 Pre-auth	High8.1	—	0.3%	Aug 18, 2026
35Monitor	CVE-2026-70944No exploit	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).oracle · hyperion financial management · CWE-269	High8.8	—	0.4%	Aug 18, 2026
30Monitor	CVE-2026-70945No exploit	Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).oracle · payroll · CWE-284 Broken access control (IDOR)	High7.7	—	0.3%	Aug 18, 2026
30Monitor	CVE-2026-70946No exploit	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).oracle · hyperion financial management · CWE-269	High7.5	—	0.3%	Aug 18, 2026
30Monitor	CVE-2026-70947No exploit	Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue).oracle · purchasing · CWE-284 Pre-auth Broken access control (IDOR)	High7.5	—	0.4%	Aug 18, 2026
35Monitor	CVE-2026-70948No exploit	Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue).oracle · purchasing · CWE-284 Broken access control (IDOR)	High8.8	—	0.4%	Aug 18, 2026
35Monitor	CVE-2026-70949No exploit	Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).oracle · siebel crm · CWE-284 Broken access control (IDOR)	High8.8	—	0.4%	Aug 18, 2026
28Monitor	CVE-2026-70950No exploit	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).oracle · hyperion financial management · CWE-269	High7.2	—	0.4%	Aug 18, 2026
35Monitor	CVE-2026-70951No exploit	Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Document Management).oracle · siebel crm · CWE-284 Broken access control (IDOR)	High8.8	—	0.4%	Aug 18, 2026
32Monitor	CVE-2026-70952No exploit	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).oracle · hyperion financial management · CWE-284 Pre-auth Broken access control (IDOR)	High8.2	—	0.4%	Aug 18, 2026
39Monitor	CVE-2026-70953No exploit	Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework).oracle · commerce platform · CWE-306 Pre-auth Auth bypass	Critical9.8	—	0.5%	Aug 18, 2026
39Monitor	CVE-2026-70954No exploit	Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework).oracle · commerce platform · CWE-306 Pre-auth Auth bypass	Critical9.8	—	0.5%	Aug 18, 2026
30Monitor	CVE-2026-70955No exploit	Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework).oracle · commerce platform · CWE-284 Pre-auth Broken access control (IDOR)	High7.5	—	0.3%	Aug 18, 2026
35Monitor	CVE-2026-70956No exploit	Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).oracle · hyperion infrastructure technology · CWE-306 Auth bypass	High8.8	—	0.4%	Aug 18, 2026
32Monitor	CVE-2026-70957No exploit	Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).oracle · hyperion infrastructure technology · CWE-284 Broken access control (IDOR)	High8.1	—	0.3%	Aug 18, 2026
38Monitor	CVE-2026-70958No exploit	Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).oracle · hyperion infrastructure technology · CWE-601 Pre-auth Open redirect	Critical9.6	—	0.4%	Aug 18, 2026
32Monitor	CVE-2026-70959No exploit	Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).oracle · hyperion infrastructure technology · CWE-284 Broken access control (IDOR)	High8.1	—	0.3%	Aug 18, 2026
30Monitor	CVE-2026-70960No exploit	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).oracle · hyperion financial management · CWE-269	High7.6	—	0.2%	Aug 18, 2026
32Monitor	CVE-2026-70964No exploit	Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).oracle · hyperion infrastructure technology · CWE-284 Broken access control (IDOR)	High8.2	—	0.2%	Aug 18, 2026
35Monitor	CVE-2026-70965No exploit	Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).oracle · hyperion infrastructure technology · CWE-284 Broken access control (IDOR)	High8.8	—	0.4%	Aug 18, 2026
35Monitor	CVE-2026-70966No exploit	Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).oracle · hyperion infrastructure technology · CWE-284 Broken access control (IDOR)	High8.8	—	0.4%	Aug 18, 2026
28Monitor	CVE-2026-70967No exploit	Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).oracle · hyperion infrastructure technology · CWE-284 Local privilege escalation Broken access control (IDOR)	High7.1	—	0.1%	Aug 18, 2026
39Monitor	CVE-2026-70970No exploit	Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).oracle · webcenter portal · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.5%	Aug 18, 2026
28Monitor	CVE-2026-70971No exploit	Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).oracle · hyperion infrastructure technology · CWE-284 Broken access control (IDOR)	High7.1	—	0.3%	Aug 18, 2026
30Monitor	CVE-2026-70973No exploit	Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).oracle · hyperion infrastructure technology · CWE-306 Auth bypass	High7.5	—	0.3%	Aug 18, 2026
36Monitor	CVE-2026-70976No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquioracle · commerce experience manager · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.1	—	0.4%	Aug 18, 2026
36Monitor	CVE-2026-70977No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquioracle · commerce experience manager · CWE-306 Pre-auth Auth bypass	Critical9.1	—	0.4%	Aug 18, 2026
36Monitor	CVE-2026-70978No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquioracle · commerce experience manager · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.1	—	0.4%	Aug 18, 2026
36Monitor	CVE-2026-70979No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquioracle · commerce experience manager · CWE-306 Pre-auth Auth bypass	Critical9.1	—	0.4%	Aug 18, 2026
36Monitor	CVE-2026-70980No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquioracle · commerce experience manager · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.0	—	0.3%	Aug 18, 2026
36Monitor	CVE-2026-70981No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquioracle · commerce experience manager · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.1	—	0.4%	Aug 18, 2026
36Monitor	CVE-2026-70984No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquioracle · commerce experience manager · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.1	—	0.4%	Aug 18, 2026
30Monitor	CVE-2026-70985No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquioracle · commerce experience manager · CWE-284 Pre-auth Broken access control (IDOR)	High7.5	—	0.4%	Aug 18, 2026
30Monitor	CVE-2026-70986No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquioracle · commerce experience manager · CWE-284 Pre-auth Broken access control (IDOR)	High7.5	—	0.4%	Aug 18, 2026
30Monitor	CVE-2026-70987No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquioracle · commerce experience manager · CWE-284 Pre-auth Broken access control (IDOR)	High7.5	—	0.4%	Aug 18, 2026
30Monitor	CVE-2026-70988No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquioracle · commerce experience manager · CWE-284 Broken access control (IDOR)	High7.7	—	0.3%	Aug 18, 2026
28Monitor	CVE-2026-70992No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquioracle · commerce experience manager · CWE-284 Local privilege escalation Broken access control (IDOR)	High7.0	—	0.1%	Aug 18, 2026
32Monitor	CVE-2026-70993No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquioracle · commerce experience manager · CWE-284 Pre-auth Broken access control (IDOR)	High8.2	—	0.3%	Aug 18, 2026
36Monitor	CVE-2026-70994No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applicoracle · commerce experience manager · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.1	—	0.4%	Aug 18, 2026
39Monitor	CVE-2026-70995No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applicoracle · commerce experience manager · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.5%	Aug 18, 2026
34Monitor	CVE-2026-70996No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applicoracle · commerce experience manager · CWE-284 Pre-auth Broken access control (IDOR)	High8.6	—	0.4%	Aug 18, 2026
36Monitor	CVE-2026-70997No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Maoracle · commerce experience manager · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.1	—	0.4%	Aug 18, 2026
37Monitor	CVE-2026-70998No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applicoracle · commerce experience manager · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.3	—	0.3%	Aug 18, 2026
32Monitor	CVE-2026-70999No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Maoracle · commerce experience manager · CWE-284 Broken access control (IDOR)	High8.1	—	0.3%	Aug 18, 2026
34Monitor	CVE-2026-71000No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Maoracle · commerce experience manager · CWE-284 Broken access control (IDOR)	High8.7	—	0.3%	Aug 18, 2026
34Monitor	CVE-2026-71002No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Maoracle · commerce experience manager · CWE-284 Broken access control (IDOR)	High8.5	—	0.2%	Aug 18, 2026
28Monitor	CVE-2026-71003No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Maoracle · commerce experience manager · CWE-284 Broken access control (IDOR)	High7.1	—	0.3%	Aug 18, 2026
29Monitor	CVE-2026-71009No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Maoracle · commerce experience manager · CWE-284 Pre-auth Broken access control (IDOR)	High7.4	—	0.3%	Aug 18, 2026
31Monitor	CVE-2026-71010No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Maoracle · commerce experience manager · CWE-284 Broken access control (IDOR)	High7.8	—	0.1%	Aug 18, 2026
28Monitor	CVE-2026-71012No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Maoracle · commerce experience manager · CWE-284 Broken access control (IDOR)	High7.1	—	0.3%	Aug 18, 2026
36Monitor	CVE-2026-71014No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applicoracle · commerce experience manager · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.1	—	0.4%	Aug 18, 2026
36Monitor	CVE-2026-71015No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applicoracle · commerce experience manager · CWE-306 Pre-auth Auth bypass	Critical9.1	—	0.4%	Aug 18, 2026
32Monitor	CVE-2026-71016No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applicoracle · commerce experience manager · CWE-284 Pre-auth Broken access control (IDOR)	High8.2	—	0.3%	Aug 18, 2026
32Monitor	CVE-2026-71018No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applicoracle · commerce experience manager · CWE-284 Pre-auth Broken access control (IDOR)	High8.2	—	0.3%	Aug 18, 2026
30Monitor	CVE-2026-71020No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applicoracle · commerce experience manager · CWE-284 Broken access control (IDOR)	High7.6	—	0.2%	Aug 18, 2026
30Monitor	CVE-2026-71021No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applicoracle · commerce experience manager · CWE-284 Broken access control (IDOR)	High7.6	—	0.2%	Aug 18, 2026
30Monitor	CVE-2026-71022No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Workbench).oracle · commerce experience manager · CWE-284 Broken access control (IDOR)	High7.6	—	0.2%	Aug 18, 2026
30Monitor	CVE-2026-71023No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applicoracle · commerce experience manager · CWE-284 Pre-auth Broken access control (IDOR)	High7.5	—	0.3%	Aug 18, 2026
32Monitor	CVE-2026-71024No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).oracle · commerce experience manager · CWE-284 Pre-auth Broken access control (IDOR)	High8.2	—	0.4%	Aug 18, 2026
36Monitor	CVE-2026-71026No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applicoracle · commerce experience manager · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.1	—	0.4%	Aug 18, 2026
30Monitor	CVE-2026-71027No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applicoracle · commerce experience manager · CWE-284 Broken access control (IDOR)	High7.6	—	0.2%	Aug 18, 2026
31Monitor	CVE-2026-71028No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applicoracle · commerce experience manager · CWE-284 Local privilege escalation Broken access control (IDOR)	High7.8	—	0.1%	Aug 18, 2026
28Monitor	CVE-2026-71030No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applicoracle · commerce experience manager · CWE-284 Pre-auth Broken access control (IDOR)	High7.2	—	0.2%	Aug 18, 2026
28Monitor	CVE-2026-71032No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applicoracle · commerce experience manager · CWE-284 Pre-auth Broken access control (IDOR)	High7.2	—	0.2%	Aug 18, 2026
30Monitor	CVE-2026-71034No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).oracle · commerce experience manager · CWE-284 Pre-auth Broken access control (IDOR)	High7.5	—	0.4%	Aug 18, 2026
32Monitor	CVE-2026-71035No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).oracle · commerce experience manager · CWE-284 Pre-auth Broken access control (IDOR)	High8.1	—	0.3%	Aug 18, 2026
36Monitor	CVE-2026-71036No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Maoracle · commerce guided search · CWE-269 Pre-auth	Critical9.1	—	0.4%	Aug 18, 2026
37Monitor	CVE-2026-71037No exploit	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Maoracle · commerce guided search · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.3	—	0.3%	Aug 18, 2026
28Monitor	CVE-2026-71041No exploit	Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Gantt Chart).oracle · agile product lifecycle management · CWE-284 Local privilege escalation Broken access control (IDOR)	High7.0	—	0.1%	Aug 18, 2026
32Monitor	CVE-2026-71042No exploit	Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: PGC / Excel Plugin).oracle · agile product lifecycle management · CWE-284 Broken access control (IDOR)	High8.1	—	0.3%	Aug 18, 2026

CVE-2026-70901
32Monitor
Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · hyperion data relationship managementAug 18, 2026
CVE-2026-70902
28Monitor
Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).
HighCVSS 7.1No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
oracle · hyperion data relationship managementAug 18, 2026
CVE-2026-70903
34Monitor
Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
oracle · hyperion data relationship managementAug 18, 2026
CVE-2026-70904
32Monitor
Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · hyperion data relationship managementAug 18, 2026
CVE-2026-70905
39Monitor
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Agent infrastructure).
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · access managerAug 18, 2026
CVE-2026-70906
30Monitor
Vulnerability in Oracle Java SE (component: 2D).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
oracle corporation · oracle java seAug 18, 2026
CVE-2026-70908
30Monitor
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
oracle · helidonAug 18, 2026
CVE-2026-70909
32Monitor
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · hyperion financial managementAug 18, 2026
CVE-2026-70910
30Monitor
Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · siebel crmAug 18, 2026
CVE-2026-70914
28Monitor
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).
HighCVSS 7.0No exploitEPSS 0%
- Broken access control (IDOR)
oracle · hyperion financial managementAug 18, 2026
CVE-2026-70918
35Monitor
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Outbound Data).
HighCVSS 8.8No exploitEPSS 0%
- Auth bypass
oracle · product hubAug 18, 2026
CVE-2026-70920
39Monitor
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).
CriticalCVSS 9.9No exploitEPSS 0%
- Broken access control (IDOR)
oracle · hyperion financial managementAug 18, 2026
CVE-2026-70921
40Plan
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · hyperion financial managementAug 18, 2026
CVE-2026-70922
35Monitor
Vulnerability in the Oracle Financial Services Enterprise Case Management product of Oracle Financial Services Applications (component: Web
HighCVSS 8.8No exploitEPSS 0%
- Auth bypass
oracle · financial services enterprise case managementAug 18, 2026
CVE-2026-70924
32Monitor
Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Security).
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · web services managerAug 18, 2026
CVE-2026-70925
32Monitor
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).
HighCVSS 8.1No exploitEPSS 0%
- Broken access control (IDOR)
oracle · hyperion financial managementAug 18, 2026
CVE-2026-70926
39Monitor
Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer).
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · workflowAug 18, 2026
CVE-2026-70927
30Monitor
Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
oracle · workflowAug 18, 2026
CVE-2026-70928
35Monitor
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).
HighCVSS 8.8No exploitEPSS 0%
oracle · hyperion financial managementAug 18, 2026
CVE-2026-70929
32Monitor
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).
HighCVSS 8.1No exploitEPSS 0%
- Broken access control (IDOR)
oracle · hyperion financial managementAug 18, 2026
CVE-2026-70930
30Monitor
Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools).
HighCVSS 7.5No exploitEPSS 0%
- Auth bypass
oracle · order managementAug 18, 2026
CVE-2026-70933
28Monitor
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
oracle · hyperion financial managementAug 18, 2026
CVE-2026-70934
28Monitor
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
oracle · hyperion financial managementAug 18, 2026
CVE-2026-70935
28Monitor
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
oracle · hyperion financial managementAug 18, 2026
CVE-2026-70936
28Monitor
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).
HighCVSS 7.1No exploitEPSS 0%
- Local privilege escalation
oracle · hyperion financial managementAug 18, 2026
CVE-2026-70937
30Monitor
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).
HighCVSS 7.5No exploitEPSS 0%
oracle · hyperion financial managementAug 18, 2026
CVE-2026-70939
28Monitor
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).
HighCVSS 7.2No exploitEPSS 0%
oracle · hyperion financial managementAug 18, 2026
CVE-2026-70940
35Monitor
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).
HighCVSS 8.8No exploitEPSS 0%
oracle · hyperion financial managementAug 18, 2026
CVE-2026-70941
35Monitor
Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).
HighCVSS 8.8No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
oracle · payrollAug 18, 2026
CVE-2026-70942
30Monitor
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).
HighCVSS 7.7No exploitEPSS 0%
oracle · hyperion financial managementAug 18, 2026
CVE-2026-70943
32Monitor
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
oracle · hyperion financial managementAug 18, 2026
CVE-2026-70944
35Monitor
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).
HighCVSS 8.8No exploitEPSS 0%
oracle · hyperion financial managementAug 18, 2026
CVE-2026-70945
30Monitor
Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).
HighCVSS 7.7No exploitEPSS 0%
- Broken access control (IDOR)
oracle · payrollAug 18, 2026
CVE-2026-70946
30Monitor
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).
HighCVSS 7.5No exploitEPSS 0%
oracle · hyperion financial managementAug 18, 2026
CVE-2026-70947
30Monitor
Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · purchasingAug 18, 2026
CVE-2026-70948
35Monitor
Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue).
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
oracle · purchasingAug 18, 2026
CVE-2026-70949
35Monitor
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
oracle · siebel crmAug 18, 2026
CVE-2026-70950
28Monitor
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).
HighCVSS 7.2No exploitEPSS 0%
oracle · hyperion financial managementAug 18, 2026
CVE-2026-70951
35Monitor
Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Document Management).
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
oracle · siebel crmAug 18, 2026
CVE-2026-70952
32Monitor
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · hyperion financial managementAug 18, 2026
CVE-2026-70953
39Monitor
Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework).
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · commerce platformAug 18, 2026
CVE-2026-70954
39Monitor
Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework).
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · commerce platformAug 18, 2026
CVE-2026-70955
30Monitor
Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · commerce platformAug 18, 2026
CVE-2026-70956
35Monitor
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).
HighCVSS 8.8No exploitEPSS 0%
- Auth bypass
oracle · hyperion infrastructure technologyAug 18, 2026
CVE-2026-70957
32Monitor
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).
HighCVSS 8.1No exploitEPSS 0%
- Broken access control (IDOR)
oracle · hyperion infrastructure technologyAug 18, 2026
CVE-2026-70958
38Monitor
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).
CriticalCVSS 9.6No exploitEPSS 0%
- Pre-auth
- Open redirect
oracle · hyperion infrastructure technologyAug 18, 2026
CVE-2026-70959
32Monitor
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).
HighCVSS 8.1No exploitEPSS 0%
- Broken access control (IDOR)
oracle · hyperion infrastructure technologyAug 18, 2026
CVE-2026-70960
30Monitor
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).
HighCVSS 7.6No exploitEPSS 0%
oracle · hyperion financial managementAug 18, 2026
CVE-2026-70964
32Monitor
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).
HighCVSS 8.2No exploitEPSS 0%
- Broken access control (IDOR)
oracle · hyperion infrastructure technologyAug 18, 2026
CVE-2026-70965
35Monitor
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
oracle · hyperion infrastructure technologyAug 18, 2026
CVE-2026-70966
35Monitor
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
oracle · hyperion infrastructure technologyAug 18, 2026
CVE-2026-70967
28Monitor
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).
HighCVSS 7.1No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
oracle · hyperion infrastructure technologyAug 18, 2026
CVE-2026-70970
39Monitor
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · webcenter portalAug 18, 2026
CVE-2026-70971
28Monitor
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
oracle · hyperion infrastructure technologyAug 18, 2026
CVE-2026-70973
30Monitor
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).
HighCVSS 7.5No exploitEPSS 0%
- Auth bypass
oracle · hyperion infrastructure technologyAug 18, 2026
CVE-2026-70976
36Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acqui
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · commerce experience managerAug 18, 2026
CVE-2026-70977
36Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acqui
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · commerce experience managerAug 18, 2026
CVE-2026-70978
36Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acqui
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · commerce experience managerAug 18, 2026
CVE-2026-70979
36Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acqui
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · commerce experience managerAug 18, 2026
CVE-2026-70980
36Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acqui
CriticalCVSS 9.0No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · commerce experience managerAug 18, 2026
CVE-2026-70981
36Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acqui
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · commerce experience managerAug 18, 2026
CVE-2026-70984
36Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acqui
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · commerce experience managerAug 18, 2026
CVE-2026-70985
30Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acqui
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · commerce experience managerAug 18, 2026
CVE-2026-70986
30Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acqui
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · commerce experience managerAug 18, 2026
CVE-2026-70987
30Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acqui
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · commerce experience managerAug 18, 2026
CVE-2026-70988
30Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acqui
HighCVSS 7.7No exploitEPSS 0%
- Broken access control (IDOR)
oracle · commerce experience managerAug 18, 2026
CVE-2026-70992
28Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acqui
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
oracle · commerce experience managerAug 18, 2026
CVE-2026-70993
32Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acqui
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · commerce experience managerAug 18, 2026
CVE-2026-70994
36Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applic
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · commerce experience managerAug 18, 2026
CVE-2026-70995
39Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applic
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · commerce experience managerAug 18, 2026
CVE-2026-70996
34Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applic
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · commerce experience managerAug 18, 2026
CVE-2026-70997
36Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · commerce experience managerAug 18, 2026
CVE-2026-70998
37Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applic
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · commerce experience managerAug 18, 2026
CVE-2026-70999
32Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma
HighCVSS 8.1No exploitEPSS 0%
- Broken access control (IDOR)
oracle · commerce experience managerAug 18, 2026
CVE-2026-71000
34Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
oracle · commerce experience managerAug 18, 2026
CVE-2026-71002
34Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma
HighCVSS 8.5No exploitEPSS 0%
- Broken access control (IDOR)
oracle · commerce experience managerAug 18, 2026
CVE-2026-71003
28Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
oracle · commerce experience managerAug 18, 2026
CVE-2026-71009
29Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · commerce experience managerAug 18, 2026
CVE-2026-71010
31Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma
HighCVSS 7.8No exploitEPSS 0%
- Broken access control (IDOR)
oracle · commerce experience managerAug 18, 2026
CVE-2026-71012
28Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
oracle · commerce experience managerAug 18, 2026
CVE-2026-71014
36Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applic
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · commerce experience managerAug 18, 2026
CVE-2026-71015
36Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applic
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
oracle · commerce experience managerAug 18, 2026
CVE-2026-71016
32Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applic
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · commerce experience managerAug 18, 2026
CVE-2026-71018
32Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applic
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · commerce experience managerAug 18, 2026
CVE-2026-71020
30Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applic
HighCVSS 7.6No exploitEPSS 0%
- Broken access control (IDOR)
oracle · commerce experience managerAug 18, 2026
CVE-2026-71021
30Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applic
HighCVSS 7.6No exploitEPSS 0%
- Broken access control (IDOR)
oracle · commerce experience managerAug 18, 2026
CVE-2026-71022
30Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Workbench).
HighCVSS 7.6No exploitEPSS 0%
- Broken access control (IDOR)
oracle · commerce experience managerAug 18, 2026
CVE-2026-71023
30Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applic
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · commerce experience managerAug 18, 2026
CVE-2026-71024
32Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · commerce experience managerAug 18, 2026
CVE-2026-71026
36Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applic
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · commerce experience managerAug 18, 2026
CVE-2026-71027
30Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applic
HighCVSS 7.6No exploitEPSS 0%
- Broken access control (IDOR)
oracle · commerce experience managerAug 18, 2026
CVE-2026-71028
31Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applic
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
oracle · commerce experience managerAug 18, 2026
CVE-2026-71030
28Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applic
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · commerce experience managerAug 18, 2026
CVE-2026-71032
28Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Applic
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · commerce experience managerAug 18, 2026
CVE-2026-71034
30Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · commerce experience managerAug 18, 2026
CVE-2026-71035
32Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge).
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · commerce experience managerAug 18, 2026
CVE-2026-71036
36Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
oracle · commerce guided searchAug 18, 2026
CVE-2026-71037
37Monitor
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
oracle · commerce guided searchAug 18, 2026
CVE-2026-71041
28Monitor
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Gantt Chart).
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
oracle · agile product lifecycle managementAug 18, 2026
CVE-2026-71042
32Monitor
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: PGC / Excel Plugin).
HighCVSS 8.1No exploitEPSS 0%
- Broken access control (IDOR)
oracle · agile product lifecycle managementAug 18, 2026