Threat Intelligence Database

CVE-2026-70714 is a vulnerability in Oracle Hyperion Calculation Manager version 11.2.25.0.000. It allows a high privileged attacker with logon access to the infrastructure where the product runs to compromise the application. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical or all accessible data within Oracle Hyperion Calculation Manager. The vulnerability has a CVSS 3.1 base score of 4.1, indicating a medium severity primarily impacting data integrity.

CVE-2026-70685 is a high-severity vulnerability in Oracle Hyperion Calculation Manager version 11.2.25.0.000. It allows an unauthenticated attacker with logon access to the infrastructure hosting the product to compromise it, potentially leading to unauthorized access and modification of critical data. The vulnerability impacts confidentiality and integrity but not availability. Oracle has published a Critical Security Patch Update advisory addressing this and many other vulnerabilities, recommending timely patch application.

CVE-2026-70676 is a vulnerability in Oracle Hyperion Calculation Manager version 11.2.25.0.000 that allows an unauthenticated attacker with network access via HTTP to potentially compromise the system. The vulnerability is difficult to exploit but can lead to unauthorized creation, deletion, or modification of critical data, unauthorized read access to some data, and partial denial of service. The CVSS 3.1 base score is 7.0, indicating a high severity level.

CVE-2026-62604 is a low-severity vulnerability in Oracle Hyperion Calculation Manager version 11.2.25.0.000. It allows an unauthenticated attacker with physical access to the communication segment attached to the hardware running the software to gain unauthorized read access to some accessible data. The vulnerability is difficult to exploit and does not impact integrity or availability.

CVE-2026-62603 is a vulnerability in Oracle Hyperion Calculation Manager version 11.2.25.0.000. It allows an unauthenticated attacker with access to the physical communication segment attached to the hardware running the software to compromise the system. Successful exploitation can lead to unauthorized read, update, insert, or delete access to some data accessible by Oracle Hyperion Calculation Manager. The CVSS 3.1 base score is 5.4, indicating a medium severity vulnerability affecting confidentiality and integrity.

CVE-2026-62598 is a high-severity vulnerability in Oracle Hyperion Calculation Manager version 11.2.25.0.000. It allows a low-privileged attacker with network access via SFTP to compromise the product, potentially leading to unauthorized creation, deletion, or modification of critical data. The vulnerability has a CVSS 3.1 base score of 8.2, indicating significant confidentiality and integrity impacts. Exploitation is considered difficult, and no known exploits are reported in the wild. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update advisory, recommending timely patching. No direct patch link for this specific vulnerability was provided, but the vendor advisory strongly urges applying available patches promptly.

CVE-2026-62571 is a high-severity vulnerability in Oracle Hyperion Calculation Manager version 11.2.25.0.000. It allows a low privileged attacker with network access via HTTP to compromise the product, potentially leading to unauthorized access to critical data. The vulnerability has a CVSS 3.1 base score of 7.7, indicating significant confidentiality impact without affecting integrity or availability. Attacks exploiting this vulnerability may also impact additional Oracle products beyond Hyperion Calculation Manager.

CVE-2026-62461 is a low-severity vulnerability in Oracle Hyperion Calculation Manager version 11.2.25.0.000. It allows an unauthenticated attacker with network access via HTTP to potentially gain unauthorized read access to some accessible data. Exploitation is difficult and requires human interaction from a person other than the attacker. The vulnerability impacts confidentiality but does not affect integrity or availability.

CVE-2026-61342 is a vulnerability in Oracle Hyperion Calculation Manager version 11.2.25.0.000. It allows an unauthenticated attacker with network access via HTTP to potentially gain unauthorized access to critical data. Exploitation requires human interaction from a person other than the attacker. The vulnerability has a CVSS 3.1 base score of 5.3, indicating medium severity, with confidentiality impact but no integrity or availability impact. Oracle has included this vulnerability in their August 2026 Critical Security Patch Update advisory but has not explicitly provided a direct patch link for this specific version in the input data.

CVE-2026-61313 is a vulnerability in Oracle Hyperion Calculation Manager version 11.2.25.0.000 that allows a high privileged attacker with logon access to the infrastructure to compromise the product. Exploitation can lead to unauthorized access to critical data or complete access to all data accessible by Oracle Hyperion Calculation Manager, including unauthorized update, insert, or delete operations. The vulnerability has a CVSS 3.1 base score of 6.7, indicating a medium severity level. The vulnerability impacts confidentiality and integrity but does not affect availability. Oracle has published a Critical Security Patch Update advisory that includes this vulnerability among many others, recommending timely patch application. No explicit patch link was provided in the input, but the vendor advisory is authoritative for patch status.