Threat Intelligence Database

CVE-2026-70765 is a vulnerability in Oracle Hyperion Financial Reporting version 11.2.25.0.000 that allows an unauthenticated attacker with network access via HTTP to compromise the product. Exploitation requires human interaction from a user other than the attacker. Successful exploitation can lead to unauthorized update, insert, or delete access to some accessible data, as well as unauthorized read access to a subset of data. The vulnerability has a CVSS 3.1 base score of 6.1, indicating a medium severity with confidentiality and integrity impacts. The vulnerability may also affect additional Oracle products due to scope change. Oracle has published a Critical Security Patch Update advisory but no explicit patch link or fix details for this specific vulnerability are provided in the input data.

CVE-2026-70744 is a high-severity vulnerability in Oracle Hyperion Financial Reporting version 11.2.25.0.000. It allows an unauthenticated attacker with network access via HTTP to potentially take over the affected system. The vulnerability is difficult to exploit but impacts confidentiality, integrity, and availability. Oracle has published a Critical Security Patch Update advisory that includes this vulnerability among many others but does not explicitly confirm patch availability for this specific version in the provided content.