Threats affecting pkg:maven/com.oracle/hyperion-financial-management

CVE-2026-70819 is a high-severity vulnerability in Oracle Hyperion Financial Management version 11.2.25.0.000. It allows a low privileged attacker with network access to exploit the system via SQL, potentially leading to full takeover of the product. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 8.8. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update, which contains numerous security fixes across multiple products.

CVE-2026-70817 is a critical vulnerability in Oracle Hyperion Financial Management version 11.2.25.0.000. It allows an unauthenticated attacker with network access via HTTP to fully compromise the product, potentially resulting in complete takeover. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability.