Tools / CVE Explorer
Which vulnerabilities actually matter?
Every CVE with its CVSS severity, EPSS probability of exploitation and CISA KEV status side by side, refreshed daily from NVD, FIRST and CISA — plus a plain-English verdict on whether it needs an emergency change or the normal patch cycle.
CVE Watchlist →Your products only, as a page, feed or emailThis week in CVEs →New by severity, KEV additions, EPSS jumpsKEV deadline calendar →CISA due dates, with an .ics feed
395,656 CVEs1,716 in CISA KEV17,391 with EPSS ≥ 10%25,049 with a public exploitUpdated 20 September 2026
39,245 results · page 38 of 785
| CVE | Summary | Priority | Published |
|---|---|---|---|
| CVE-2026-70926 | Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). | CRITICAL 9.8EPSS 0.51% | 18 August 2026 |
| CVE-2026-70921 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). | CRITICAL 10.0EPSS 0.43% | 18 August 2026 |
| CVE-2026-70920 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). | CRITICAL 9.9EPSS 0.43% | 18 August 2026 |
| CVE-2026-70905 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Agent infrastructure). | CRITICAL 9.8EPSS 0.47% | 18 August 2026 |
| CVE-2026-70884 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). | CRITICAL 9.1EPSS 0.40% | 18 August 2026 |
| CVE-2026-70883 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). | CRITICAL 9.1EPSS 0.33% | 18 August 2026 |
| CVE-2026-70880 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). | CRITICAL 10.0EPSS 0.35% | 18 August 2026 |
| CVE-2026-70876 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). | CRITICAL 9.1EPSS 0.45% | 18 August 2026 |
| CVE-2026-70873 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). | CRITICAL 9.8EPSS 0.47% | 18 August 2026 |
| CVE-2026-70872 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). | CRITICAL 9.1EPSS 0.33% | 18 August 2026 |
| CVE-2026-70871 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). | CRITICAL 9.8EPSS 0.35% | 18 August 2026 |
| CVE-2026-70862 | Vulnerability in Oracle Application Testing Suite. | CRITICAL 9.1EPSS 0.33% | 18 August 2026 |
| CVE-2026-70855 | Vulnerability in the Siebel Apps - Self Service product of Oracle Siebel CRM (component: Helpdesk/Training). | CRITICAL 9.3EPSS 0.33% | 18 August 2026 |
| CVE-2026-70854 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). | CRITICAL 9.1EPSS 0.45% | 18 August 2026 |
| CVE-2026-70846 | Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (component: Internal Operations). | CRITICAL 9.6EPSS 0.34% | 18 August 2026 |
| CVE-2026-70817 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). | CRITICAL 9.8EPSS 0.47% | 18 August 2026 |
| CVE-2026-70745 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). | CRITICAL 9.8EPSS 0.47% | 18 August 2026 |
| CVE-2026-70741 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). | CRITICAL 9.1EPSS 0.40% | 18 August 2026 |
| CVE-2026-70740 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). | CRITICAL 9.8EPSS 0.47% | 18 August 2026 |
| CVE-2026-70739 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). | CRITICAL 9.8EPSS 0.47% | 18 August 2026 |
| CVE-2026-70730 | Vulnerability in the Oracle Hyperion Profitability and Cost Management product of Oracle Hyperion (component: Deployment). | CRITICAL 9.1EPSS 0.40% | 18 August 2026 |
| CVE-2026-70689 | Vulnerability in Oracle Essbase (component: Infrastructure). | CRITICAL 9.8EPSS 0.49% | 18 August 2026 |
| CVE-2026-70673 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). | CRITICAL 9.3EPSS 0.34% | 18 August 2026 |
| CVE-2026-70669 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). | CRITICAL 9.8EPSS 0.38% | 18 August 2026 |
| CVE-2026-70668 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). | CRITICAL 9.1EPSS 0.31% | 18 August 2026 |
| CVE-2026-62988 | Exposure of both values for an account can enable takeover of the hosting panel or hosted resources and can defeat both authentication factors. | CRITICAL 9.0EPSS 0.68% | 18 August 2026 |
| CVE-2026-62640 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). | CRITICAL 9.8EPSS 0.47% | 18 August 2026 |
| CVE-2026-62639 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). | CRITICAL 9.8EPSS 0.47% | 18 August 2026 |
| CVE-2026-62638 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). | CRITICAL 9.1EPSS 0.42% | 18 August 2026 |
| CVE-2026-62635 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). | CRITICAL 9.8EPSS 0.51% | 18 August 2026 |
| CVE-2026-62634 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). | CRITICAL 9.8EPSS 0.47% | 18 August 2026 |
| CVE-2026-62633 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). | CRITICAL 9.8EPSS 0.51% | 18 August 2026 |
| CVE-2026-62632 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). | CRITICAL 9.8EPSS 0.51% | 18 August 2026 |
| CVE-2026-62630 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). | CRITICAL 9.8EPSS 0.47% | 18 August 2026 |
| CVE-2026-62629 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). | CRITICAL 9.4EPSS 0.39% | 18 August 2026 |
| CVE-2026-62626 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). | CRITICAL 9.8EPSS 0.51% | 18 August 2026 |
| CVE-2026-62624 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). | CRITICAL 9.8EPSS 0.47% | 18 August 2026 |
| CVE-2026-62622 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). | CRITICAL 9.8EPSS 0.47% | 18 August 2026 |
| CVE-2026-62621 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). | CRITICAL 9.8EPSS 0.47% | 18 August 2026 |
| CVE-2026-62618 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). | CRITICAL 9.3EPSS 0.26% | 18 August 2026 |
| CVE-2026-62617 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). | CRITICAL 9.8EPSS 0.47% | 18 August 2026 |
| CVE-2026-62614 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). | CRITICAL 9.8EPSS 0.47% | 18 August 2026 |
| CVE-2026-62611 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). | CRITICAL 9.8EPSS 0.47% | 18 August 2026 |
| CVE-2026-62610 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). | CRITICAL 9.1EPSS 0.31% | 18 August 2026 |
| CVE-2026-62609 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). | CRITICAL 9.8EPSS 0.47% | 18 August 2026 |
| CVE-2026-62608 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). | CRITICAL 9.9EPSS 0.40% | 18 August 2026 |
| CVE-2026-62592 | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). | CRITICAL 9.8EPSS 0.48% | 18 August 2026 |
| CVE-2026-62588 | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). | CRITICAL 9.9EPSS 0.41% | 18 August 2026 |
| CVE-2026-62585 | Vulnerability in the Siebel CRM Administration product of Oracle Siebel CRM (component: Data Archival). | CRITICAL 9.8EPSS 0.35% | 18 August 2026 |
| CVE-2026-62582 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). | CRITICAL 9.6EPSS 0.28% | 18 August 2026 |
How to read this
CVSS measures how bad a vulnerability could be if exploited. EPSS (from FIRST) estimates the probability it will actually be exploited in the next thirty days. KEV is CISA’s list of vulnerabilities that are being exploited right now. EXPLOIT means a working exploit is published in Exploit-DB, so the technical barrier is gone. Patch KEV entries first, then anything with a public exploit or an EPSS above 10 per cent, then work down by CVSS in your normal cycle.
Data is refreshed daily from the NVD, FIRST EPSS, the CISA KEV catalogue and the Exploit-DB repository. Every record can be downloaded as JSON from its page. Our SOC uses the same table to prioritise patching for clients; the verdict on each page is the rule of thumb our analysts apply.