CVE-2026-70889 is a high-severity vulnerability in Oracle Hyperion Data Relationship Management version 11.2.25.0.000. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical or all accessible data within the product. The vulnerability affects the access and security component and has a CVSS 3.1 base score of 7.5, indicating a significant confidentiality impact without requiring privileges or user interaction.
CVE-2026-70887 is a high-severity vulnerability in Oracle Hyperion Data Relationship Management version 11.2.25.0.000. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data and perform unauthorized update, insert, or delete operations on some accessible data. The vulnerability affects the access and security component of the product and has a CVSS 3.1 base score of 8.2. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update advisory but has not explicitly stated patch availability for this specific version.
CVE-2026-70886 is a high-severity vulnerability in Oracle Hyperion Data Relationship Management version 11.2.25.0.000. It allows a low privileged attacker with network access via HTTP to compromise the system, potentially leading to full takeover. The vulnerability affects confidentiality, integrity, and availability with a CVSS 3.1 base score of 8.8. Oracle has included this fix in its August 2026 Critical Security Patch Update.
CVE-2026-70884 is a critical vulnerability in Oracle Hyperion Data Relationship Management version 11.2.25.0.000. It allows an unauthenticated attacker with network access via SOAP to gain unauthorized creation, deletion, or modification access to critical data. The vulnerability impacts confidentiality and integrity with a CVSS 3.1 base score of 9.1. Oracle has acknowledged the issue but has not explicitly provided patch availability details in the advisory.
CVE-2026-70882 is a high-severity vulnerability in Oracle Hyperion Data Relationship Management version 11.2.25.0.000. It allows a low privileged attacker with network access via HTTP to compromise the product, requiring user interaction from a third party. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, impacting confidentiality and integrity. The vulnerability has a CVSS 3.1 base score of 8.7. Oracle has included this fix in its August 2026 Critical Security Patch Update.
CVE-2026-70880 is a critical vulnerability in Oracle Hyperion Data Relationship Management version 11.2.25.0.000. It allows an unauthenticated attacker with network access via TCP to fully compromise the product, potentially impacting additional Oracle products. The vulnerability affects access and security components and has a CVSS 3.1 base score of 10.0, indicating high confidentiality, integrity, and availability impacts. Oracle has published a Critical Security Patch Update addressing this and many other vulnerabilities.
CVE-2026-70878 is a high-severity vulnerability in Oracle Hyperion Data Relationship Management version 11.2.25.0.000. It allows a low privileged attacker with network access via HTTP to compromise the product, potentially leading to unauthorized creation, deletion, or modification of critical data. The vulnerability impacts confidentiality and integrity but not availability. The vulnerability has a CVSS 3.1 base score of 8.1. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update, which provides security patches for affected products.
CVE-2026-70876 is a critical vulnerability in Oracle Hyperion Data Relationship Management version 11.2.25.0.000. It allows a high privileged attacker with network access via HTTPS to compromise the product, potentially leading to full takeover. The vulnerability impacts confidentiality, integrity, and availability, with a CVSS 3.1 base score of 9.1. Attacks exploiting this flaw may also affect additional Oracle products due to scope change. Oracle has published a Critical Security Patch Update that addresses this and many other vulnerabilities.
CVE-2026-70875 is a vulnerability in Oracle Hyperion Data Relationship Management version 11.2.25.0.000. It allows a low privileged attacker with network access via HTTP to potentially take over the affected product. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with impacts on confidentiality, integrity, and availability. The vulnerability is difficult to exploit and requires high attack complexity. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update advisory.
CVE-2026-70873 is a critical vulnerability in Oracle Hyperion Data Relationship Management version 11.2.25.0.000. It allows an unauthenticated attacker with network access via TCP to fully compromise the product, potentially leading to complete takeover. The vulnerability affects access and security components and has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability.
CVE-2026-70872 is a critical vulnerability in Oracle Hyperion Data Relationship Management version 11.2.25.0.000. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized creation, deletion, or modification access to critical data. The vulnerability impacts confidentiality and integrity but not availability. The CVSS 3.1 base score is 9.1, indicating a high severity. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update advisory. No explicit patch link was provided in the input, but Oracle strongly recommends applying security patches promptly.
CVE-2026-70871 is a critical vulnerability in Oracle Hyperion Data Relationship Management version 11.2.25.0.000. It allows an unauthenticated attacker with network access via TCP to fully compromise the product, potentially leading to complete takeover. The vulnerability affects access and security components and has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability.
Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Web Services). The supported version that is affected is 11.2.19.0.000. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Data Relationship Management. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).