Unauthenticated, remote attackers can read critical data from Oracle Communications Billing and Revenue Management (BRM) Server versions 15.0.0.0.0, 15.0.1.0.0.0, 15.1.0.0.0, and 15.2.0.0.0 over HTTP, with CVSS 3.1 score 7.5 driven solely by confidentiality impact. The vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) indicates no credentials or user interaction are required, and there is no integrity or availability impact. No public exploit was identified at time of analysis, and no KEV or EPSS signal was supplied; real-world risk depends heavily on whether the BRM Server HTTP interface is reachable from untrusted networks.
Unauthenticated remote attackers who can reach the HTTP interface of Oracle Communications Unified Inventory Management (versions 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1) can read critical data without supplying any credentials, because of a flaw in the product's Security component. The exposure is purely confidentiality-focused (CVSS 3.1: 7.5, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) - no integrity or availability impact and no host-level privilege escalation - so a successful attack amounts to full disclosure of inventory data the application can access. No public exploit code and no confirmed active exploitation were identified at time of analysis, and the practical barrier to abuse is network exposure: UIM is a back-office telecom OSS platform normally kept on internal management networks rather than the public internet.
Unauthenticated network attackers can read sensitive Oracle Applications Manager data in Oracle E-Business Suite 12.2.3 through 12.2.15 through the Oracle Diagnostics Interfaces component. The vulnerability is remotely reachable over HTTP with low attack complexity and no credentials or user interaction required, yielding a CVSS 3.1 score of 7.5 with confidentiality-only impact. No public exploit code or confirmed active exploitation was identified at time of analysis, and exposure is primarily limited by whether the Applications Manager interface is network-accessible.
Unauthenticated data disclosure in Oracle BI EE 8.2.0.0.0 and 26.01.0.0.0 allows a remote attacker with HTTP access to the Analytics Server to read critical data or all data accessible through the product, with a CVSS 3.1 base score of 7.5 and confidentiality-only impact. No special conditions are required beyond network reachability, so exposure is bounded mainly by whether the Analytics Server HTTP interface is Internet-facing, VPN-restricted, or behind a WAF/reverse proxy. No public exploit identified at time of analysis.
Unauthenticated information disclosure in the Oracle Siebel CRM Deployment Cloud Gateway lets any remote attacker who can reach the gateway over HTTP read critical data and, per Oracle, potentially all data accessible through that deployment; supported versions 17.0 through 26.9 are affected. The CVSS 3.1 score is 7.5 with confidentiality-only impact (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N), meaning no user interaction, no privileges, and no integrity or availability effect. Oracle's October 2026 Critical Patch Update advisory is the cited vendor reference and is the source of the fix; no public exploit code has been identified at time of analysis, and the flaw is not listed as confirmed actively exploited (CISA KEV).
Unauthenticated attackers can read sensitive data from Oracle Siebel CRM End User versions 17.0 through 26.9 by exploiting an authentication bypass in the UIF Open UI component over HTTP. The CVSS 7.5 vector shows network reachability with low complexity, no privileges, and no user interaction, but impact is confined to confidentiality (C:H/I:N/A:N). No public exploit code or confirmed active exploitation was identified at time of analysis.
Unauthenticated remote attackers who can reach an Oracle Siebel CRM Deployment server over HTTP can read critical data or the full set of data accessible to that deployment, affecting versions 17.0 through 26.9 of the Server Infrastructure component. The flaw scores CVSS 3.1 7.5 with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, meaning no credentials, no user interaction and no special configuration are prerequisites, and impact is limited to confidentiality - no integrity or availability effect is described. Oracle published the fix in its October 2026 Critical Patch Update; no public exploit code has been identified at time of analysis, and no EPSS score was supplied with the available intelligence.
Exposes critical data in Oracle Siebel CRM Deployment 17.0 through 26.9 to unauthenticated remote attackers through the TLS-exposed Server Infrastructure component, carrying a CVSS 3.1 score of 7.5 (High). Impact is confidentiality-only: attackers can read critical or all deployment-accessible CRM data but cannot modify data or disrupt service. No public exploit identified at time of analysis, and no CISA KEV entry was provided.
Unauthenticated HTTP requests to the SQR component of Oracle PeopleSoft Enterprise PeopleTools 8.61 through 8.63 can return critical application data to anyone who can simply reach the web tier, a confidentiality-only but high-severity exposure scored CVSS 3.1 7.5 (AV:N/AC:L/PR:N/UI:N/C:H/I:N/A:N). Oracle addressed the flaw in its October 2026 Critical Patch Update; no public exploit code and no CISA KEV entry were identified in the data reviewed, so real-world risk hinges on whether the PeopleSoft Internet Architecture and SQR endpoints are internet-reachable or segmented behind VPNs, reverse proxies, or internal networks. This is a credible operational priority rather than an inflated high-CVSS artifact, because the attacker needs no credentials, no user interaction, and no non-default configuration once the endpoint is reachable.
Unauthenticated HTTP requests to the Report Distribution component in PeopleSoft Enterprise PeopleTools 8.61-8.63 can read critical PeopleSoft data, with Oracle scoring the flaw CVSS 3.1 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). The weakness is described by Oracle as easily exploitable and affects confidentiality only, with no integrity or availability impact; no public exploit code or CISA KEV entry is identified at time of analysis, so risk is mid-tier and driven by the clean remote unauthenticated vector rather than confirmed exploitation.
Oracle Payroll, as shipped within Oracle E-Business Suite 12.2.3 through 12.2.15, can be fully taken over by an attacker who already holds a low-privilege account on the EBS instance and can reach the Payroll 'Internal Operations' component over HTTP, with high confidentiality, integrity, and availability impact (CVSS 3.1 base score 7.5). The high attack complexity rating (AC:H) reflects Oracle's assessment that exploitation is difficult and depends on non-default timing, server state, or configuration preconditions, so it is not reliably repeatable against an arbitrary target. The authentication prerequisite (PR:L) rules out anonymous attackers, and no public exploit code has been identified at time of analysis - this is not a CISA KEV entry and does not appear to be under confirmed active exploitation, placing it in a second-tier remediation priority behind internet-exposed, unauthenticated flaws.
Takeover of the Oracle Payroll component within Oracle E-Business Suite 12.2.3 through 12.2.15 is possible for low-privileged attackers who already hold a valid EBS account and can reach the Internal Operations component over HTTP. Successful exploitation yields high confidentiality, integrity, and availability impact (CVSS 3.1 base score 7.5), but Oracle rates the flaw difficult to exploit because attack complexity is high and specific preconditions must align. No public exploit code or confirmed active exploitation was identified at time of analysis, and Oracle addressed the issue in its October 2026 Critical Patch Update.
Oracle One-to-One Fulfillment 12.2.3 through 12.2.15 can be taken over by an authenticated low-privileged attacker with network access to the Documents component, resulting in full confidentiality, integrity, and availability impact. Exploitation is rated difficult (AC:H) and requires valid credentials (PR:L), so opportunistic attacks are unlikely; no public exploit code or CISA KEV entry was identified at time of analysis. Signals lean toward a moderate, not urgent, priority.
Full compromise of the Integrated SOA Gateway - including confidentiality, integrity and availability of the SOA Provider component - is possible in Oracle E-Business Suite 12.2.3 through 12.2.15 by a low-privileged user who already holds a valid EBS account and can reach the gateway over HTTP. Oracle rates the flaw as 'difficult to exploit' (CVSS 3.1 7.5, AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H), meaning conditions outside the attacker's control must align before a successful takeover, and no public exploit code or confirmed active exploitation was identified at time of analysis. The authentication prerequisite and high attack complexity are the main constraints defenders can rely on, so the practical priority is patching on the October 2026 CPU cycle rather than emergency response.
Takeover of Oracle iSetup is possible for a low-privileged authenticated attacker who can reach the General Ledger Update Transform and Reports component over HTTP in Oracle E-Business Suite 12.2.3 through 12.2.15. The 7.5 CVSS score reflects high confidentiality, integrity, and availability impact, but the high attack-complexity metric means attacker-uncontrollable preconditions must be satisfied; no public exploit code was identified at time of analysis and CISA KEV does not list it. Only EBS deployments running the iSetup module on the stated versions are affected.
Full compromise of Oracle iSetup - high confidentiality, integrity and availability impact - is achievable by a low-privileged, authenticated attacker who can reach the General Ledger Update Transform and Reports functionality over HTTP, with Oracle E-Business Suite 12.2.3 through 12.2.15 affected. Oracle rates exploitation as difficult (AC:H), meaning success depends on conditions outside the attacker's control such as a specific component state, timing window, or configuration, which materially narrows practical risk despite the 7.5 base score. No public exploit code or active exploitation was identified at time of analysis, and no EPSS score or CISA KEV listing was supplied, so this should be treated as a high-impact but opportunistic-targeting concern rather than an emergency patch-now event.
Privilege escalation and potential full compromise of the Oracle Application Object Library in Oracle E-Business Suite 12.2.3 through 12.2.15 allow a low-privileged authenticated attacker with HTTP network access to take over the affected component, with high confidentiality, integrity, and availability impact. This is a genuine but second-tier priority because exploitation is difficult (AC:H) and requires valid low-privileged EBS credentials (PR:L); no public exploit identified at time of analysis and no CISA KEV active-exploitation signal was provided.
Takeover of Oracle Materials Requirement Planning (MRP) in Oracle E-Business Suite 12.2.3-12.2.15 is possible for a low-privileged attacker with network access via HTTP to the Internal Operations component, though the high attack complexity makes exploitation difficult. Successful attacks provide high confidentiality, integrity, and availability impact; authentication requirements and environmental timing/state conditions limit the attack surface. No public exploit identified at time of analysis, and the primary vendor reference is Oracle's October 2026 Critical Patch Update advisory.
Authenticated low-privileged users with network HTTP access to Oracle Cost Management 12.2.3 through 12.2.15 can potentially take over the Cost Maintenance component, with high confidentiality, integrity, and availability impact (CVSS 7.5). Oracle rates the flaw difficult to exploit (AC:H), and exploitation requires a valid low-privileged E-Business Suite account plus reachable Cost Management deployment. No public exploit was identified at time of analysis, and the CVE is not listed in CISA KEV.
Takeover of Oracle Sales Foundation, a component of Oracle E-Business Suite, is possible for authenticated low-privileged attackers who can reach the Security API over HTTP in versions 12.2.3 through 12.2.15. Oracle rates this 7.5 with high attack complexity (AC:H) and explicitly describes it as difficult to exploit, so success likely hinges on configuration state, timing, or target-specific reconnaissance rather than a simple request. No public exploit code and no CISA KEV entry were identified at time of analysis, and the required low-privileged EBS account further narrows the realistic attacker population.
Code execution in Advantech ADAM-3600 industrial controllers can be achieved by exploiting a buffer overflow in the password verification routine, but an attacker must first hold guest-level credentials. The issue is network-reachable and high-complexity, with a CVSS 4.0 score of 7.5; our independent assessment uses CVSS 3.1 with PR:L, suggesting the real authentication barrier may be lower than the vendor vector's PR:H indicates. No public exploit identified at time of analysis.
Privilege escalation and application takeover in Oracle Agile Product Lifecycle Management for Process 6.2.4: an authenticated attacker holding only low-privileged credentials can reach the Product Quality Management component over HTTP and, if the difficult exploitation conditions are met, gain full control of the application with high confidentiality, integrity and availability impact. The flaw is rated CVSS 3.1 7.5 (AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H), and the high attack complexity points to a narrow, condition-dependent trigger rather than a straightforward request. No public exploit code or confirmed active exploitation was identified at time of analysis, and only version 6.2.4 is listed as affected in Oracle's October 2026 Critical Patch Update.
Authenticated low-privileged users can take over Oracle E-Business Suite Workflow (versions 12.2.3 through 12.2.15) by attacking the Workflow Notification Mailer component over HTTP, with high impact across confidentiality, integrity, and availability (CVSS 3.1 base score 7.5). Oracle rates the flaw difficult to exploit, and the CVSS vector's high attack complexity (AC:H) indicates a specific server state or precondition must be met rather than a simple request being sufficient, although no user interaction is required. No public exploit code or confirmed active exploitation has been identified at time of analysis, and Oracle addresses the issue in its October 2026 Critical Patch Update. This is a moderate-priority item for EBS estates that expose the notification mailer, not an emergency unauthenticated remote compromise.
Low-privileged authenticated attackers can achieve full takeover of the Oracle iProcurement application (E-Business Suite 12.2.3 through 12.2.15) by reaching the Requisition Management component over HTTP, with high impact to confidentiality, integrity, and availability. The flaw is rated high complexity (AC:H) - Oracle describes it as 'difficult to exploit', meaning success depends on conditions such as specific configuration, timing, or data state rather than a single deterministic request - and requires a valid low-privileged session, so anonymous users cannot trigger it. No public exploit code has been identified and there is no CISA KEV listing at time of analysis, but because a compromised account yields application-level takeover, any provisioned iProcurement user should be treated as a potential launch point.
Oracle SOA Suite's Fabric Layer can be taken over by a low-privileged attacker who already has authenticated network access via HTTP, affecting versions 12.2.1.4.0 and 14.1.2.0.0. The high attack complexity (AC:H) means exploitation depends on conditions outside the attacker's direct control, and no public exploit was identified at time of analysis. The issue carries a 7.5 CVSS base score with high confidentiality, integrity, and availability impact.
Low-privileged authenticated attackers with HTTP network access can achieve full takeover of Oracle SOA Suite 12.2.1.4.0 and 14.1.2.0.0 through a flaw in the Fabric Layer component, with high impact to confidentiality, integrity and availability (CVSS 3.1 base score 7.5). The CVSS vector (AV:N/AC:H/PR:L/UI:N/S:U) means a valid low-privileged account is required and Oracle rates the flaw as difficult to exploit, so attack complexity and account provisioning are the main real-world barriers rather than the score alone. No public exploit code or confirmed active exploitation was identified at time of analysis, and Oracle tracks the fix through its October 2026 Critical Patch Update.
Takeover of the Pasta Printing Engine component within Oracle E-Business Suite 12.2.3 through 12.2.15 is possible for a low-privileged authenticated user who can reach the component over HTTP, with full impact to confidentiality, integrity, and availability (CVSS 3.1 base 7.5). Oracle characterizes the flaw as difficult to exploit, and the AC:H metric indicates an additional precondition the attacker does not fully control - such as a specific timing window, race condition, or particular printing-component state - so reliable, single-shot exploitation is not implied; no public exploit code and no active exploitation (CISA KEV) were identified at time of analysis. This is a serious but not top-tier priority issue: exploitation is gated behind valid EBS credentials and applies only to 12.2.x deployments running the Pasta component, and no user interaction is required (UI:N).
Oracle Payroll in Oracle E-Business Suite 12.2.3 through 12.2.15 can be compromised by a low-privileged attacker with network access via HTTP, potentially resulting in takeover of the Payroll component with high confidentiality, integrity, and availability impact. The flaw resides in the Internal Operations component and has high attack complexity, so exploitation requires a valid low-privileged account plus conditions outside the attacker's control; no public exploit was identified at time of analysis. With a CVSS 3.1 score of 7.5, the risk is High but constrained by the authentication and complexity prerequisites.
A high-complexity privilege-escalation flaw in Oracle JD Edwards EnterpriseOne Tools (Enterprise Infrastructure SEC component, versions 9.2.0.0 through 9.2.26.5) lets a low-privileged, already-authenticated attacker reach the JDENET service over the network and take over the EnterpriseOne Tools environment, with full confidentiality, integrity, and availability impact (CVSS 7.5). Exploitation is explicitly difficult (AC:H) because success depends on timing, configuration, or environmental conditions outside the attacker's control, and it requires pre-existing low-privilege credentials plus network reachability to JDENET. No public exploit code or confirmed active exploitation was identified at time of analysis, and no EPSS or CISA KEV signal was supplied; Oracle addresses it in its October 2026 Critical Patch Update.
Successful exploitation of Oracle Sourcing 12.2.3 through 12.2.15 can allow a low-privileged authenticated attacker with HTTP network access to take over the Auctions component, causing high confidentiality, integrity, and availability impact. Oracle rates the issue difficult to exploit because attack complexity is high, meaning additional conditions outside the attacker's direct control must be satisfied beyond sending crafted requests. No public exploit code or CISA KEV entry was identified at time of analysis, so the practical risk is constrained by the valid-account prerequisite and the high-complexity barrier.
Takeover of Oracle E-Business Suite's Bills of Material module (versions 12.2.3 through 12.2.15) is possible for a low-privileged attacker who can reach the 'Internal Operations' component over HTTP, but the high attack complexity makes this a genuine second-tier priority rather than an emergency. Exploitation requires a valid EBS account and conditions beyond the attacker's control, and no public exploit code or confirmed active exploitation was identified at time of analysis.
Takeover of the Oracle HCM Common Architecture component is possible in Oracle E-Business Suite releases 12.2.3 through 12.2.15, where a low-privileged attacker with HTTP network access to the Internal Operations functionality can achieve full compromise of the component with high confidentiality, integrity and availability impact. Exploitation is constrained: the attacker must already hold valid low-privilege EBS credentials (PR:L) and the attack carries high complexity (AC:H), meaning success depends on conditions outside the attacker's direct control such as timing, configuration or application state, and no end-user interaction is required (UI:N). No public exploit code was identified and the issue is not confirmed actively exploited (not in CISA KEV) at time of analysis; EPSS was not provided, so risk is concentrated on internet-exposed EBS deployments where low-privilege or self-service accounts are widely provisioned.
Oracle E-Business Suite's HCM Common Architecture component (Internal Operations) in versions 12.2.3 through 12.2.15 can be compromised by a low-privileged attacker with network HTTP access, allowing full takeover of the component with high confidentiality, integrity, and availability impact (CVSS 3.1 base 7.5). Exploitation is gated by high attack complexity - Oracle describes it as 'difficult to exploit' - meaning conditions outside the attacker's direct control (such as a specific application state, configuration, or timing condition) must align, and the attacker must already hold a valid low-privileged EBS account (PR:L, not unauthenticated). There is no public exploit code and no confirmed active exploitation (not in CISA KEV) at time of analysis, but internet-exposed EBS portals enlarge the pool of potential low-privileged attackers who could attempt it.
Takeover of Oracle Bills of Material in Oracle E-Business Suite 12.2.3 through 12.2.15 is possible for a low-privileged authenticated attacker with network HTTP access to the Internal Operations component. The flaw is explicitly difficult to exploit (AC:H) and requires no user interaction, but successful exploitation would fully compromise confidentiality, integrity, and availability. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV.
Authenticated low-privileged users can compromise Oracle General Ledger 12.2.3 through 12.2.15 over HTTP, with successful exploitation potentially leading to takeover of the General Ledger component. The CVSS 3.1 score is 7.5, reflecting high confidentiality, integrity, and availability impact, but Oracle rates the attack as difficult to exploit because it requires high attack complexity in addition to valid credentials. No public exploit code or active exploitation is identified at time of analysis, and remediation is available through Oracle's October 2026 Critical Patch Update.
Authenticated takeover of the Pasta component in Oracle E-Business Suite 12.2.3 through 12.2.15 is achievable by a low-privileged user who already holds a valid account and can reach the Internal Operations HTTP interface, although Oracle rates the attack as difficult to carry out (CVSS 3.1 base score 7.5, AV:N/AC:H/PR:L/UI:N). Successful exploitation fully compromises confidentiality, integrity, and availability of the Pasta component, but the AC:H rating means success depends on non-trivial preconditions such as specific application state, timing, or a particular configuration rather than a single straightforward request. No public exploit code and no confirmed active exploitation (no CISA KEV listing) were identified at time of analysis, and the mandatory authentication gate makes opportunistic internet-wide scanning and exploitation improbable.
Oracle One-to-One Fulfillment in Oracle E-Business Suite 12.2.3 through 12.2.15 exposes a Java Server Issues flaw that a low-privileged, network-positioned attacker could use to take over the component, with high confidentiality, integrity, and availability impact (CVSS 3.1 base 7.5). Exploitation is rated difficult (AC:H) and requires an authenticated low-privileged account plus HTTP access; no public exploit identified at time of analysis. Oracle's October 2026 Critical Patch Update is the referenced remediation source.
Authenticated low-privileged users of Oracle Communications Unified Inventory Management (7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, 8.0.1) can leverage the Security component over HTTP to achieve full takeover of the application, with high confidentiality, integrity and availability impact scored at CVSS 3.1 base 7.5. Exploitation is explicitly rated difficult (AC:H) by Oracle and requires valid low-privileged credentials (PR:L) reachable over the network, so this is not a remote-unauthenticated attack. No public exploit code or confirmed active exploitation (CISA KEV) was identified at time of analysis, and no EPSS score was supplied; given the credential prerequisite, the high attack complexity and the typically internal placement of UIM, this is a genuine but second-tier priority compared with internet-facing, unauthenticated Oracle flaws.
Full takeover of Oracle Product Lifecycle Analytics 3.6.1 is possible for a low-privileged authenticated attacker who can reach the application over the network and deliver a SQL-based attack against its Installation Issues component, with high confidentiality, integrity, and availability impact. Oracle rates the issue difficult to exploit (AC:H) and assigns CVSS 3.1 score 7.5; exploitation requires valid credentials (PR:L) and favorable conditions beyond the attacker's direct control. No CISA KEV entry or public exploit code is identified in the provided intelligence, so this should be handled on the normal Oracle CPU cadence rather than as an emergency.
Authenticated low-privileged attackers can achieve takeover of PeopleSoft Enterprise PeopleTools 8.61-8.63 by reaching the SQR component over HTTP, although Oracle rates the flaw as difficult to exploit because of high attack complexity (AC:H). The CVSS 3.1 score is 7.5 with high confidentiality, integrity, and availability impact, and exploitation requires valid low-privileged credentials (PR:L) but no user interaction (UI:N). No public exploit identified at time of analysis, and no CISA KEV confirmation was provided, so risk is concentrated in environments that expose SQR over HTTP and allow low-privileged accounts.
Takeover of Oracle PeopleSoft Enterprise PeopleTools 8.61 through 8.63 is possible through its Business Interlink component, where a low-privileged network attacker who can reach the integration endpoint over HTTP could achieve full confidentiality, integrity, and availability impact. Exploitation is constrained by high attack complexity and the need for valid authenticated access (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H; 7.5), and no public exploit identified at time of analysis, with no KEV or POC signal in the provided intelligence.
Unauthenticated remote attackers with HTTP access to the Enterprise Infrastructure SEC component of Oracle JD Edwards EnterpriseOne Tools (releases 9.2.0.0 through 9.2.26.5) can tamper with application data, based on the vendor's CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N, base 7.5). The flaw is scored for high integrity impact only - attackers cannot read confidential data or disrupt availability - but no privileges or user interaction are required, making the integrity of EnterpriseOne business records the sole but significant exposure. No public exploit code or confirmed active exploitation was identified at time of analysis, and the primary practical limit on exposure is whether the EnterpriseOne Tools HTTP interface is reachable from untrusted networks.
Oracle Outside In PDF Export SDK 8.5.8 (part of Oracle Fusion Middleware) can be fully compromised - confidentiality, integrity, and availability all high - when a third-party application that embeds the SDK processes a maliciously crafted document. The vulnerability is unauthenticated and network-reachable over HTTP, but Oracle rates it difficult to exploit and it requires a human other than the attacker to trigger parsing of the malicious file, so practical exposure depends entirely on whether a reachable service feeds untrusted documents into the PDF Export component. No public exploit code or confirmed active exploitation was identified at time of analysis; the 7.5 score reflects the high impact and the AC:H/UI:R preconditions rather than demonstrated weaponization.
Takeover of Oracle Agile PLM 9.3.6 is possible through its Application Server component, where an unauthenticated network attacker who persuades a legitimate user to interact with crafted HTTP content can achieve high confidentiality, integrity, and availability impact. Oracle rates this 7.5 (High) with CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H, and the high attack complexity plus required user interaction make automated mass exploitation unlikely. No public exploit has been identified at time of analysis.
Memory exhaustion in Cloudflare Pingora's HTTP/2 server (versions before 0.8.1) lets a single remote, unauthenticated client drive the process into OOM termination by abusing HPACK header compression and HTTP/2 flow control. Because the h2 crate defaults were left in place, an attacker can emit tiny 1-byte indexed references to an almost-empty header and multiply them into hundreds of thousands of decoded header fields per stream, across an unbounded number of concurrent streams on one connection, exhausting memory (CVSS 3.1: 7.5, AV:N/AC:L/PR:N/UI:N/C:N/I:N/A:H, CWE-770). The reporter demonstrated a lone connection getting a Pingora process capped at 2 GiB OOM-killed; no public exploit code has been identified at time of analysis and the issue is not listed in CISA KEV, but the barrier to entry is low for any internet-facing service that terminates h2 or h2c without explicit limits, while Cloudflare CDN customers were unaffected because its internal Pingora services do not front HTTP/2 clients.
Crashing or hanging Oracle Outside In Technology 8.5.8's Clean Content SDK is possible for unauthenticated remote attackers who can get a crafted document into an application that embeds the library, yielding availability-only impact at CVSS 7.5. Because the flaw lives in a document-parsing SDK rather than a standalone network service, real exposure depends entirely on whether a document-upload, conversion, or content-extraction feature is reachable over HTTP. No public exploit code or confirmed active exploitation was identified at time of analysis, so this is a bounded denial-of-service risk rather than a compromise or escalation threat.
MySQL Server and MySQL Cluster in the 8.4, 9.7 and 26.7 branches (plus Cluster 8.0.x) ship a mysqldump client that can be subverted by an attacker-controlled, malicious, or man-in-the-middle MySQL endpoint, letting an attacker who can influence the server a victim dumps from take over the client host with full confidentiality, integrity and availability impact (CVSS 7.5, C:H/I:H/A:H). The trust boundary is inverted: the victim must actively launch mysqldump against the hostile endpoint, which is why Oracle scores it AC:H and UI:R despite no credentials being needed against the attacker's own endpoint (PR:N). No public exploit code or CISA KEV entry was identified at time of analysis, and no EPSS score was supplied, so real-world exploitation is currently unproven rather than observed.
Takeover of MySQL Server and MySQL Cluster is possible for unauthenticated network attackers able to reach the Server: Replication component, but Oracle rates the flaw difficult to exploit and success requires human interaction from a person other than the attacker. Affected releases are MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1, plus MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. CVSS 3.1 scores it 7.5 with high confidentiality, integrity and availability impact; no public exploit identified at time of analysis and no CISA KEV entry appears in the provided intelligence.
Unauthenticated LDAP requests to the LDAP Gateway in Oracle IDM Connector 12.2.1.4.0 and 14.1.2.1.0 can expose critical connector-accessible data, giving remote attackers a confidentiality-only read primitive rated CVSS 7.5. The flaw is network-reachable and requires no credentials or user interaction, but exploitation depends on the gateway being deployed and accessible over LDAP. No public exploit code or CISA KEV entry was identified at time of analysis, so risk is bounded by network exposure rather than by confirmed active exploitation.
Unauthenticated data disclosure in PeopleSoft FIN Common Objects Argentina 9.1 allows network attackers using Oracle Net to read critical or complete application data. The Integration component flaw requires only network reachability to the Oracle Net endpoint, with no credentials or user interaction, and its impact is limited to confidentiality. No public exploit code or CISA KEV entry was identified at time of analysis, and exposure is sharply reduced where Oracle Net is restricted to trusted internal segments.