Threat Intelligence Database

CVE-2026-70736 is a vulnerability in Oracle Hyperion Profitability and Cost Management version 11.2.25.0.000 that allows a low privileged attacker with network access via HTTP to compromise the product. Successful exploitation can lead to unauthorized access to critical data or complete access to all accessible data, as well as unauthorized update, insert, or delete operations on some data. The vulnerability has a CVSS 3.1 base score of 7.1, indicating high severity with significant confidentiality and integrity impacts.

CVE-2026-70735 is a vulnerability in Oracle Hyperion Profitability and Cost Management version 11.2.25.0.000. It allows a high privileged attacker with network access via HTTP to compromise the product, potentially resulting in full takeover. The vulnerability has a CVSS 3.1 base score of 7.2, indicating high severity with impacts on confidentiality, integrity, and availability.

CVE-2026-70733 is a vulnerability in Oracle Hyperion Profitability and Cost Management version 11.2.25.0.000. It allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data or all accessible data within the product. Additionally, the attacker can cause a partial denial of service. The vulnerability has a CVSS 3.1 base score of 7.1, indicating a high severity with significant confidentiality and availability impacts.

CVE-2026-70730 is a critical vulnerability in Oracle Hyperion Profitability and Cost Management version 11.2.25.0.000. It allows an unauthenticated attacker with network access via HTTP to compromise the product, potentially resulting in unauthorized creation, deletion, or modification of critical data. The vulnerability has a CVSS 3.1 base score of 9.1, indicating high confidentiality and integrity impact without availability impact.

CVE-2026-70723 is a vulnerability in Oracle Hyperion Profitability and Cost Management version 11.2.25.0.000. It allows a low privileged attacker with network access via HTTP to compromise the product, potentially leading to unauthorized access to critical data or complete access to all accessible data within the product. The vulnerability has a CVSS 3.1 base score of 7.7, indicating high severity with significant confidentiality impact. The vulnerability may also affect additional Oracle products due to scope change. Oracle has published a Critical Security Patch Update in August 2026 addressing this and many other vulnerabilities.

CVE-2026-70721 is a high-severity vulnerability in Oracle Hyperion Profitability and Cost Management version 11.2.25.0.000. It allows an unauthenticated attacker with network access via HTTP to compromise the product, potentially gaining unauthorized access to critical data or complete access to all accessible data within the product. The vulnerability impacts confidentiality but does not affect integrity or availability. The vulnerability may also affect additional Oracle products due to scope change. Oracle has published a Critical Security Patch Update in August 2026 addressing this and many other vulnerabilities.