This vulnerability affects Oracle Hyperion Infrastructure Technology component Installation and Configuration in version 11.2.25.0.000. It permits a low privileged attacker with network access over HTTP to compromise the system, potentially resulting in complete takeover. The CVSS vector (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) indicates network attack vector, high attack complexity, low privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. Oracle has published a Critical Security Patch Update advisory for August 2026 covering this and many other vulnerabilities but does not explicitly confirm a patch for this specific CVE in the provided content.

Successful exploitation can lead to full compromise of Oracle Hyperion Infrastructure Technology, impacting confidentiality, integrity, and availability of the system. This could allow an attacker to take over the affected product.

Oracle strongly recommends applying security patches promptly as part of their Critical Security Patch Update program. However, the vendor advisory does not explicitly confirm a patch availability for CVE-2026-70973. Customers should monitor Oracle's official security alerts and apply relevant patches when available. Until then, maintain updated versions and follow Oracle's guidance.