Threat Intelligence Database

CVE-2026-70675 is a high-severity vulnerability in Oracle Reports Developer 14.1.2.0.0. It allows an unauthenticated attacker with network access via HTTP to potentially take over the Oracle Reports Developer product. The vulnerability is difficult to exploit but impacts confidentiality, integrity, and availability. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update, which provides targeted security fixes across many products including Oracle Reports Developer.

CVE-2026-70674 is a high-severity vulnerability in Oracle Reports Developer 14.1.2.0.0 that allows an unauthenticated attacker with access to the physical communication segment of the hardware running the software to compromise it. Successful exploitation can lead to full takeover of Oracle Reports Developer, impacting confidentiality, integrity, and availability.

CVE-2026-70672 is a high-severity vulnerability in Oracle Reports Developer 14.1.2.0.0 that allows an unauthenticated attacker with network access via HTTP to potentially compromise the product. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, or unauthorized access to all data accessible by Oracle Reports Developer. The vulnerability is difficult to exploit and has a CVSS 3.1 base score of 7.4, reflecting high confidentiality and integrity impacts but no availability impact. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update advisory.

CVE-2026-70671 is a high-severity vulnerability in Oracle Reports Developer 14.1.2.0.0 that allows a low privileged attacker with network access via HTTP to compromise the product. Exploitation can lead to unauthorized creation, deletion, or modification of critical data, as well as unauthorized access to all data accessible by Oracle Reports Developer. The vulnerability has a CVSS 3.1 base score of 8.1, indicating significant confidentiality and integrity impacts.

CVE-2026-70670 is a critical vulnerability in Oracle Reports Developer 14.1.2.0.0 that allows an unauthenticated attacker with access to the physical communication segment of the hardware running the software to compromise it. Successful exploitation can lead to full takeover of Oracle Reports Developer and may impact additional Oracle products. The vulnerability has a CVSS 3.1 base score of 9.6, indicating high confidentiality, integrity, and availability impacts.

CVE-2026-70669 is a critical vulnerability in Oracle Reports Developer 14.1.2.0.0 that allows an unauthenticated attacker with network access via HTTP to fully compromise the product. The vulnerability affects security and authentication components and can lead to complete takeover of Oracle Reports Developer. It has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability.

CVE-2026-70668 is a critical vulnerability in Oracle Reports Developer 14.1.2.0.0 that allows an unauthenticated attacker with network access via SOAP to compromise the product. Exploitation can lead to unauthorized creation, deletion, or modification of critical data accessible through Oracle Reports Developer, resulting in full confidentiality and integrity impact. The vulnerability has a CVSS 3.1 base score of 9.1, indicating high severity. Oracle has acknowledged this vulnerability in their August 2026 Critical Security Patch Update advisory but has not explicitly confirmed patch availability for this specific version in the provided data.

CVE-2026-62639 is a critical vulnerability in Oracle Reports Developer 14.1.2.0.0 that allows an unauthenticated attacker with network access via CORBA to fully compromise the product. The vulnerability impacts confidentiality, integrity, and availability, potentially enabling complete takeover of Oracle Reports Developer.

CVE-2026-62638 is a critical vulnerability in Oracle Reports Developer 14.1.2.0.0 that allows an unauthenticated attacker with network access via HTTP to compromise the product. Exploitation can lead to unauthorized creation, deletion, or modification of critical data and can cause a denial of service by hanging or crashing the application. The vulnerability has a CVSS 3.1 base score of 9.1, indicating high integrity and availability impacts.

CVE-2026-62637 is a critical vulnerability in Oracle Reports Developer 14.1.2.0.0 that allows an unauthenticated attacker with access to the physical communication segment of the hardware running the software to compromise it. Exploitation can lead to unauthorized creation, deletion, or modification of critical data accessible by Oracle Reports Developer. The vulnerability also has a scope change, potentially impacting additional Oracle products. The CVSS 3.1 base score is 9.3, reflecting high confidentiality and integrity impacts.