Full compromise of the Oracle HCM Common Architecture module (Internal Operations component) within Oracle E-Business Suite is possible, allowing an attacker who already holds high-level application privileges to take over the module over the network via HTTP. The flaw affects EBS releases 12.2.3 through 12.2.15 and carries a CVSS 3.1 score of 7.2 with full confidentiality, integrity, and availability impact. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but Oracle rates it 'easily exploitable' for an authenticated actor.
Full takeover of Oracle iStore (the Oracle E-Business Suite customer-facing web storefront) is possible via its Shopping Cart component in releases 12.2.3 through 12.2.15, where a high-privileged attacker with HTTP network access can compromise confidentiality, integrity, and availability. Oracle rates this CVSS 3.1 7.2 and shipped a fix in the July 2026 Critical Patch Update; there is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Full compromise of Oracle Receivables (the accounts-receivable module of Oracle E-Business Suite 12.2.3 through 12.2.15) is possible via the Internal Operations component, where an authenticated attacker holding high privileges can send crafted HTTP requests to take over the module. Oracle rates this CVSS 7.2 with high confidentiality, integrity, and availability impact and describes it as 'easily exploitable,' but exploitation is gated behind existing high-privilege access. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Full compromise of Oracle Assets (part of Oracle E-Business Suite, Internal Operations component) is achievable by a high-privileged, network-adjacent attacker over HTTP, per the Oracle July 2026 Critical Patch Update. With a CVSS 3.1 base score of 7.2 (C:H/I:H/A:H) and no user interaction required, successful exploitation results in complete takeover of Oracle Assets across supported releases 12.2.3 through 12.2.15. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Privilege-based takeover of Oracle Unified Directory (OUD Core) affects Fusion Middleware versions 12.2.1.4.0 and 14.1.2.1.0, where a high-privileged attacker with LDAP network access can fully compromise the directory service. Successful exploitation yields complete takeover with high confidentiality, integrity, and availability impact (CVSS 3.1 base 7.2). No public exploit identified at time of analysis; addressed in Oracle's July 2026 Critical Patch Update.
Full takeover of Oracle GoldenGate is possible in versions 21.3-21.21 and 23.4-23.26.1 through the Distribution Server executable, where a high-privileged attacker reaching the server over HTTPS can fully compromise confidentiality, integrity, and availability. The flaw carries a CVSS 3.1 base score of 7.2 and requires existing elevated privileges rather than anonymous access, so it is best characterized as a privileged-user-to-full-compromise escalation within the GoldenGate management plane. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Full takeover of Oracle Project Costing (part of Oracle E-Business Suite) is possible via the Enterprise Command Center component, where a high-privileged, network-authenticated attacker sending HTTP requests can compromise confidentiality, integrity, and availability of the module. Affected releases span EBS 12.2.3 through 12.2.15, and Oracle rates the flaw CVSS 3.1 7.2 while noting it is 'easily exploitable.' There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but a fix is delivered in the Oracle July 2026 Critical Patch Update.
Full compromise of Oracle WebCenter Content is possible via the Content Server component in Fusion Middleware releases 12.2.1.4.0 and 14.1.2.0.0, where an attacker holding high privileges can send crafted HTTP requests to take over the product with confidentiality, integrity, and availability impact. Oracle rates the flaw CVSS 3.1 7.2 and describes it as easily exploitable once the required privilege level is held. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the addressing of it in Oracle's July 2026 Critical Patch Update signals vendor-confirmed severity.
Full takeover of Oracle Enterprise Manager Base Platform (versions 13.5 and 24.1) is possible through the Self Update Framework component, where an authenticated high-privileged attacker reaching the console over HTTPS can compromise the confidentiality, integrity and availability of the entire management platform. Oracle rates it CVSS 3.1 7.2 and describes it as easily exploitable once the required privileges are held. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Full compromise of the Oracle Enterprise Manager Base Platform (versions 13.5 and 24.1) is possible through its Self Update Framework component, allowing an already high-privileged, authenticated attacker with network/HTTPS access to escalate to complete takeover of the platform with high confidentiality, integrity, and availability impact. Oracle rates this CVSS 3.1 7.2 and describes it as easily exploitable; there is no public exploit identified at time of analysis and it is not listed in CISA KEV. Because Enterprise Manager centrally administers large Oracle estates, a takeover here is a high-value pivot despite the elevated privilege prerequisite.
Full takeover of Oracle Enterprise Manager Base Platform (versions 13.5 and 24.1) is possible via the Connector Framework component, allowing an attacker who already holds high privileges to fully compromise confidentiality, integrity, and availability over the network via HTTPS. Oracle rates this CVSS 7.2 and, despite the 'Information Disclosure' tag, the described impact is complete product takeover (C:H/I:H/A:H). There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Filesystem access in the web-based management interface of HPE EdgeConnect SD-WAN Gateway (ECOS) allows an authenticated, highly privileged remote administrator to reach the underlying device filesystem beyond the intended management scope. Once exploited, an attacker can read sensitive files and tamper with or delete system data, undermining the confidentiality, integrity, and availability of the gateway. There is no public exploit identified at time of analysis and the issue is not listed in CISA KEV; it is a vendor-reported (HPE) information-disclosure and data-tampering flaw with a CVSS base score of 7.2.
Unauthenticated network compromise of Oracle Utilities Network Management System (Mobile component) allows remote attackers to gain partial read access and partial write (insert/update/delete) access to NMS-accessible data over HTTP, with a scope change that can significantly impact adjacent products. Oracle tags this as an Authentication Bypass and rates it CVSS 7.2; no public exploit was identified at time of analysis, and it is not listed in CISA KEV. Affected releases span the 2.5.x, 2.6.x, and 25.12.x branches, fixed in the Oracle Critical Patch Update of July 2026.
Privilege escalation with scope change in Oracle Coherence (Oracle Fusion Middleware Core component) lets a low-privileged attacker with local logon access compromise the confidentiality and integrity of all Coherence-accessible data and impact additional products beyond Coherence itself. Oracle rates it CVSS 3.1 7.2, but the attack is hard to execute: it requires an existing account, high attack complexity, and human interaction from a separate victim. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, though the fix ships in Oracle's July 2026 Critical Patch Update.
Cross-job-group log disclosure in XXL-Job 2.4.2 lets an authenticated low-privilege user read execution log content belonging to job groups they have no rights to, by calling the logDetailCat endpoint with incremented sequential logId values. The flaw is an insecure direct object reference (IDOR): logDetailCat omits the authorization check that its sibling logDetailPage endpoint enforces, so any logged-in account can enumerate and harvest sensitive log output across the entire scheduler. Reported by VulnCheck; no public exploit identified at time of analysis and it is not listed in CISA KEV.
Sensitive data disclosure in Oracle WebCenter Content 12.2.1.4.0 and 14.1.2.0.0 (Web Content Management component) lets a low-privileged, network-based attacker read or fully access all data the application can reach and cause a partial denial of service over HTTP. Oracle rates it CVSS 3.1 7.1 and describes it as easily exploitable, though it requires an existing low-level account (PR:L). There is no public exploit identified at time of analysis and it is not listed in CISA KEV; it was disclosed in the Oracle July 2026 Critical Patch Update.
Sensitive-data disclosure and partial denial of service in Oracle Payments (Oracle E-Business Suite File Transmission component, versions 12.2.3 through 12.2.15) lets a low-privileged attacker with HTTP network access read all Oracle Payments-accessible data and partially disrupt the service. Oracle rates it CVSS 3.1 7.1 (C:H/A:L), and intelligence tags flag an authentication-bypass characteristic, though the CVSS vector confirms some privilege is required. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Denial-of-service and information disclosure in Oracle Commerce Guided Search Platform Services 11.4.0 (Forge component) lets a low-privileged, network-adjacent attacker send crafted HTTP requests to hang or repeatedly crash the service (complete DoS) and read a subset of accessible data. The flaw is rated CVSS 3.1 7.1 and was disclosed by Oracle in the July 2026 Critical Patch Update. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but Oracle characterizes it as easily exploitable.
Denial-of-service and information disclosure in Oracle JD Edwards EnterpriseOne HCM Foundation 9.2 (OW HR PR Foundation component) allows a low-privileged, authenticated attacker with network/HTTP access to hang or repeatedly crash the application (complete DoS) and read a subset of accessible data. Oracle rates it CVSS 3.1 7.1 and describes it as 'easily exploitable.' There is no public exploit identified at time of analysis and it is not listed in CISA KEV; no EPSS score was supplied.
Data tampering and partial denial of service in Oracle HRMS (UK) - the UK Payroll component of Oracle E-Business Suite (EBS) versions 12.2.3 through 12.2.15 - lets a low-privileged, authenticated attacker with HTTP network access create, modify or delete critical HRMS data and partially degrade the service. Oracle rates it CVSS 3.1 7.1 and describes it as 'easily exploitable' (AC:L), meaning any account holder on the EBS instance can abuse it. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, so exploitation is currently theoretical rather than observed.
Data tampering and partial denial of service in Oracle Time and Labor (Oracle E-Business Suite 12.2.3-12.2.15, Internal Operations component) allows a low-privileged, network-authenticated attacker to create, delete, or modify all Time and Labor accessible data and partially disrupt the service over HTTP. The CVSS 3.1 base score is 7.1 (I:H/A:L, no confidentiality impact), reflecting an integrity-focused flaw. There is no public exploit identified at time of analysis and it is not listed in CISA KEV; EPSS data was not provided.
Broken authorization in the Ninja Forms WordPress plugin (versions 3.14.8 and prior) lets an authenticated Author-level user expose stored form submissions to any unauthenticated site visitor by embedding the `ninja-forms/submissions-table` Gutenberg block with an arbitrary formID on a published post. Because the block's render callback performs no capability check and injects a signed bearer token into every visitor's browser via `wp_localize_script`, anyone loading the page can replay that token against the REST submissions endpoint and read all saved field values, including PII such as names, emails, and phone numbers. Reported by VulnCheck; a vendor patch is available, but no public exploit code was identified at time of analysis and the flaw is not in CISA KEV - no public exploit identified at time of analysis.
Data tampering and partial denial-of-service in Oracle Contracts Integration (a module of Oracle E-Business Suite, Internal Operations component) affects supported EBS releases 12.2.3 through 12.2.15. An unauthenticated remote attacker who can lure a legitimate user into interacting with a crafted HTTP request can create, delete, or modify all Contracts-Integration-accessible data and partially disrupt the service. No public exploit identified at time of analysis, and it is not listed in CISA KEV; Oracle rates it CVSS 3.1 7.1.
Information disclosure and limited data tampering in Oracle E-Business Suite's Process Manufacturing Logistics module (Internal Operations component) lets a low-privileged, network-based attacker reach critical application data over HTTP. Affecting supported EBS releases 12.2.3 through 12.2.15, a successful attack yields full read access to all Process Manufacturing Logistics data plus partial write (insert/update/delete) capability. No public exploit identified at time of analysis, and the flaw is not listed in CISA KEV; EPSS was not provided.
Unauthorized data compromise in Oracle Commerce Guided Search / Experience Manager 11.4.0 (Experience Manager component) allows a low-privileged, network-based attacker over HTTP to gain complete read access to all accessible data plus limited update, insert, and delete capability. Rated CVSS 7.1 and tagged as an authentication bypass, it was disclosed by Oracle in the July 2026 Critical Patch Update and requires only low-level credentials with no user interaction. There is no public exploit identified at time of analysis and the CVE is not listed in CISA KEV.
Unauthorized data access in Oracle Communications Unified Inventory Management (versions 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1) allows a low-privileged attacker with HTTP network access to compromise the Security component, gaining read access to all UIM-accessible data plus limited update, insert, or delete capability. Rated CVSS 3.1 7.1 (C:H/I:L) and flagged by Oracle as easily exploitable, though no public exploit has been identified and it is not listed in CISA KEV. The vendor 'Authentication Bypass' tag suggests the flaw undermines authorization controls despite requiring only low privileges to begin.
Unauthorized data access in Oracle Installed Base (a module of Oracle E-Business Suite, versions 12.2.3 through 12.2.15) lets a low-privileged, network-based attacker read all data accessible to the Installed Base application and modify some of it via HTTP. Oracle rates it CVSS 7.1, driven by high confidentiality impact and partial integrity impact with no availability effect. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, though it is disclosed as part of the Oracle July 2026 Critical Patch Update.
Unauthorized data access and partial data manipulation in Oracle Advanced Pricing (the Pricing Installation component of Oracle E-Business Suite, versions 12.2.3 through 12.2.15) allows a low-privileged attacker with network access over HTTP to read all data accessible to the module and to insert, update, or delete some of it. The flaw is rated CVSS 3.1 7.1 (High) with high confidentiality impact and low integrity impact; Oracle disclosed it in the July 2026 Critical Patch Update. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, though EBS pricing modules are attractive targets in enterprise ERP environments.
Sensitive data exposure in Oracle Compensation Workbench (Oracle E-Business Suite 12.2.3 through 12.2.15) lets a low-privileged, network-authenticated attacker read all data accessible to the component and perform limited unauthorized inserts, updates, or deletes over HTTP. Rated CVSS 7.1 (C:H/I:L/A:N), it was disclosed in the Oracle July 2026 Critical Patch Update. There is no public exploit identified at time of analysis and it is not on CISA KEV, though EBS is a high-value target and Oracle CPU flaws have historically drawn attacker interest.
Unauthorized data access in Oracle E-Business Suite's Compensation Workbench component (versions 12.2.3 through 12.2.15) allows a low-privileged, authenticated attacker with HTTP network access to read all data accessible to the module and to modify some of it. Oracle rates this CVSS 7.1 (C:H/I:L). No public exploit is identified at time of analysis and it is not listed in CISA KEV, though it was disclosed in Oracle's July 2026 Critical Patch Update.
Unauthorized data access in Oracle Applications Framework (the OAF layer of Oracle E-Business Suite) lets a low-privileged, network-based attacker abuse the Search Bean [Incl. Advanced] component to read all OAF-accessible data and perform limited unauthorized updates, inserts, or deletes. Affected releases span EBS 12.2.3 through 12.2.15, and the flaw is rated CVSS 3.1 7.1 with high confidentiality and low integrity impact. No public exploit has been identified at time of analysis, and it is addressed in Oracle's July 2026 Critical Patch Update.
Information disclosure and partial data tampering in Oracle Enterprise Command Center Framework V16 (a component of Oracle E-Business Suite) allows a low-privileged, network-authenticated attacker to reach critical data and make limited unauthorized modifications over HTTP. Disclosed in Oracle's July 2026 Critical Patch Update, the flaw carries a CVSS 3.1 score of 7.1 with high confidentiality impact and is described by Oracle as easily exploitable. No public exploit identified at time of analysis, and it is not listed in CISA KEV.
Information disclosure and partial data tampering in the Imaging component (Core) of Oracle WebCenter Content, part of Oracle Fusion Middleware, affects supported versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with HTTP network access can compromise the Imaging service, gaining unauthorized read access to all Imaging-accessible data and limited unauthorized update, insert, or delete capability, addressed in Oracle's July 2026 Critical Patch Update. No public exploit identified at time of analysis; the record carries an 'Authentication Bypass' tag despite the CVSS requiring low privileges (PR:L).
Data manipulation and denial-of-service in Oracle PeopleSoft Enterprise CS Campus Community 9.2.38 (Person Data component) lets a low-privileged, network-authenticated attacker create, delete or modify critical data, read a subset of accessible data, and trigger a repeatable crash of the module. The flaw carries a CVSS 3.1 base score of 7.1 and is flagged as difficult to exploit (AC:H). No public exploit has been identified at time of analysis, and it is not listed in CISA KEV.
Data tampering and information disclosure in Oracle Price Protection (Oracle E-Business Suite, Internal Operations component) versions 12.2.3 through 12.2.15 lets a low-privileged attacker with HTTP network access create, delete, or modify critical Price Protection data and read a subset of accessible data. The flaw carries a CVSS 3.1 base score of 7.1 (C:L/I:H/A:N) and was disclosed in Oracle's July 2026 Critical Patch Update. No public exploit has been identified at time of analysis, the issue is not listed in CISA KEV, and no EPSS score was provided.
Data tampering in the Oracle Project Portfolio Analysis module of Oracle E-Business Suite (Internal Operations component, versions 12.2.3 through 12.2.15) lets a low-privileged, network-authenticated attacker create, delete, or modify critical application data and read a subset of accessible data over HTTP. Oracle rates it 7.1 (CVSS 3.1) and describes it as easily exploitable, though impact is confined to data integrity and limited confidentiality with no availability effect. No public exploit identified at time of analysis; it was disclosed in the Oracle Critical Patch Update of July 2026.
Data tampering in Oracle Price Protection (Oracle E-Business Suite, Internal Operations component) versions 12.2.3 through 12.2.15 allows a low-privileged remote attacker with an authenticated HTTP session to create, delete, or modify critical application data and read a subset of Price Protection data. The CVSS 3.1 base score is 7.1, driven primarily by high integrity impact (I:H) with limited confidentiality exposure (C:L) and no availability impact. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Data tampering and partial denial of service in Oracle Project Portfolio Analysis (a module of Oracle E-Business Suite versions 12.2.3 through 12.2.15) lets a low-privileged, network-based attacker over HTTP create, delete, or modify all data accessible to the application via its Internal Operations component. Oracle rates it CVSS 3.1 7.1 with high integrity and low availability impact and no confidentiality impact. No public exploit identified at time of analysis and it is not in CISA KEV; it was disclosed and fixed in Oracle's July 2026 Critical Patch Update.
Unauthorized information disclosure and case-attachment tampering in Elastic Kibana lets a low-privileged authenticated user with limited file-management permissions read, alter, or delete case attachments belonging to feature areas they should not reach, including sensitive Security Solution cases. The flaw stems from Kibana's file-access authorization check and its resource retrieval using two different resolution mechanisms, allowing the authorization gate to be bypassed. No public exploit identified at time of analysis; not listed in CISA KEV, and EPSS was not provided.
Gitea's Actions permission engine grants fork-PR task tokens unauthorized code-read access to third private repositories via a missing fork-PR discriminator in the collaborative-owner branch of `GetActionsUserRepoPermission`. All Gitea instances running versions up to and including 1.26.4 are affected when the collaborative-owner Actions feature is configured, as confirmed by vendor advisory GHSA-fj8v-hjwv-qm88 and EUVD-2026-58151. An attacker who has had at least one fork PR previously approved can exploit this to clone the full source of a private repository they were never authorized to access; impact is strictly read-only, with no write or code-execution capability. A functional PoC was included in the security advisory; this CVE is not in the CISA KEV catalog and no EPSS score was provided in the available data.
Data compromise in Oracle MySQL Connector/J (MySQL Connectors 9.7.0 through 9.7.1) allows a low-privileged attacker with network access over multiple protocols to read, create, delete, or modify all data accessible to the connector and to cause a partial denial of service. Oracle rates this CVSS 3.1 7.1 (AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L), reflecting high difficulty of exploitation but broad confidentiality and integrity impact. There is no public exploit identified at time of analysis and it is not listed in CISA KEV; the fix ships in Oracle's July 2026 Critical Patch Update.
Data tampering in Oracle Coherence (Core component) of Oracle Fusion Middleware allows a low-privileged attacker with TCP network access to create, delete, or modify critical data and read a subset of accessible data. Versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 are affected, with Oracle rating the flaw easily exploitable (CVSS 3.1 base 7.1, high integrity impact). No public exploit identified at time of analysis, and the issue is not listed in CISA KEV; it was disclosed in Oracle's July 2026 Critical Patch Update.
Unauthorized critical-data access in Oracle Advanced Pricing (Pricing Installation component) of Oracle E-Business Suite versions 12.2.14 through 12.2.15 allows a low-privileged, network-authenticated attacker over HTTP to read all data accessible to the module and to make limited unauthorized inserts, updates, or deletes. Because the flaw carries a scope change, successful exploitation may significantly impact additional integrated E-Business Suite products beyond Pricing itself. Disclosed in Oracle's July 2026 Critical Patch Update with a CVSS 3.1 base score of 7.1; no public exploit has been identified at time of analysis and it is not listed in CISA KEV.
Denial of service in Atlassian Confluence Data Center allows an authenticated attacker to render the application unavailable to legitimate users by triggering resource exhaustion that disrupts the host's services. Affected releases span the 9.0.x through 10.2.x branches, with a CVSS 4.0 score of 7.1 (High) driven entirely by availability impact. No public exploit has been identified at time of analysis; the flaw was discovered internally via Atlassian's penetration testing program rather than through in-the-wild activity.
Sensitive data disclosure in Oracle HRMS (UK) UK Payroll, part of Oracle E-Business Suite 12.2.3 through 12.2.15, lets a low-privileged attacker with HTTP network access read all HRMS-accessible data and modify some of it. The flaw is exploitable by an authenticated user (CVSS 3.1 PR:L) and carries a base score of 7.1 with high confidentiality and low integrity impact. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, though Oracle E-Business Suite payroll modules are high-value targets holding PII and financial data.
Unauthorized data access in Oracle Field Service (Oracle E-Business Suite, Internal Operations component) versions 12.2.3 through 12.2.15 allows a low-privileged, remotely authenticated attacker to read all Field Service-accessible data and make limited unauthorized modifications over HTTP. Rated CVSS 3.1 7.1 (high) with high confidentiality and low integrity impact, the flaw is described by Oracle as easily exploitable and is tagged as an authentication bypass. There is no public exploit identified at time of analysis, it is not on CISA KEV, and no EPSS score was supplied.
Unauthorized data access and partial data manipulation in Oracle WebCenter Content: Imaging (Fusion Middleware component: Core) lets a low-privileged, network-based attacker read all Imaging-accessible data and modify some of it over HTTP. Versions 12.2.1.4.0 and 14.1.2.0.0 are affected, with a CVSS 3.1 base score of 7.1 driven by high confidentiality and low integrity impact. No public exploit identified at time of analysis and the flaw is not on CISA KEV; the Oracle-supplied 'Authentication Bypass' tag is somewhat at odds with the CVSS PR:L requirement and should be verified against the vendor advisory.
Data tampering in Oracle Project Portfolio Analysis (a module of Oracle E-Business Suite, component Internal Operations), versions 12.2.3 through 12.2.15, lets a low-privileged attacker with network HTTP access create, delete, or modify critical application data and read a subset of accessible data. Oracle rates it CVSS 3.1 7.1 with high integrity impact, and describes it as easily exploitable. No public exploit identified at time of analysis, and it is not listed in CISA KEV.
Data tampering in Oracle E-Business Suite's Financials Common Modules (Common Components) lets a low-privileged, network-authenticated attacker perform unauthorized creation, deletion, and modification of critical financial data across all module-accessible records, plus read access to a subset of that data. Affected releases span 12.2.3 through 12.2.15, remediated in Oracle's July 2026 Critical Patch Update. No public exploit identified at time of analysis and it is not listed in CISA KEV, though the tag 'Authentication Bypass' warrants scrutiny given the authenticated CVSS profile.
Data manipulation in Oracle Enterprise Manager Base Platform (versions 13.5 and 24.1, Metadata Plugin component) allows a low-privileged attacker with HTTPS network access to create, delete, or modify critical data and read a subset of data across the platform. Rated CVSS 3.1 7.1 by Oracle, the flaw is described as easily exploitable and tagged as an authentication-bypass class issue. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.