Threat Intelligence Database

CVE-2026-70736 is a high-severity vulnerability in Oracle Hyperion Profitability and Cost Management version 11.2.25.0.000. It allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data or complete access to all accessible data within the product. The attacker can also perform unauthorized update, insert, or delete operations on some data. The vulnerability has a CVSS 3.1 base score of 7.1, indicating significant confidentiality and integrity impacts. No official patch or remediation level is explicitly confirmed in the vendor advisory, but Oracle strongly recommends applying security patches promptly. The vendor advisory does not specifically mention this vulnerability's patch status or mitigation steps, so users should consult Oracle's Critical Security Patch Update advisories for updates.

CVE-2026-70735 is a high severity vulnerability in Oracle Hyperion Profitability and Cost Management version 11.2.25.0.000. It allows a high privileged attacker with network access via HTTP to compromise the product, potentially resulting in full takeover. The vulnerability has a CVSS 3.1 base score of 7.2, indicating high impact on confidentiality, integrity, and availability. No explicit patch or remediation details are provided in the vendor advisory, but Oracle strongly recommends applying security patches promptly to mitigate such vulnerabilities.

CVE-2026-70733 is a high-severity vulnerability in Oracle Hyperion Profitability and Cost Management version 11.2.25.0.000. It allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data or all accessible data within the product. The vulnerability also enables the attacker to cause a partial denial of service. The CVSS 3.1 base score is 7.1, reflecting high confidentiality impact and low availability impact. No official patch or remediation level is explicitly stated in the vendor advisory, but Oracle strongly recommends applying security patches promptly. The vulnerability is not reported to be exploited in the wild yet.

CVE-2026-70730 is a critical vulnerability in Oracle Hyperion Profitability and Cost Management version 11.2.25.0.000. It allows an unauthenticated attacker with network access via HTTP to compromise the product, potentially leading to unauthorized creation, deletion, or modification of critical data. The vulnerability has a CVSS 3.1 base score of 9.1, indicating high confidentiality and integrity impact without availability impact. Oracle has published a Critical Security Patch Update advisory that includes security patches addressing this and other vulnerabilities. Customers are strongly advised to apply Oracle's security patches promptly to mitigate this risk.