Threat Intelligence Database

CVE-2026-70719 is a vulnerability in Oracle Hyperion Calculation Manager version 11.2.25.0.000. It allows an unauthenticated attacker who has logon access to the infrastructure where the product runs to gain unauthorized read access to some data accessible by the application. The vulnerability has a medium severity with a CVSS 3.1 base score of 4.0, indicating limited confidentiality impact without integrity or availability effects. No public exploits are known, and Oracle has not explicitly provided a patch link in the advisory. The vulnerability is related to security controls within the product component.

CVE-2026-70711 is a vulnerability in Oracle Hyperion Calculation Manager version 11.2.25.0.000. It allows an unauthenticated attacker with logon access to the infrastructure where the product runs to potentially compromise the application. Successful exploitation requires human interaction from a user other than the attacker. The vulnerability can lead to unauthorized read, update, insert, or delete access to some accessible data within Oracle Hyperion Calculation Manager. The CVSS 3.1 base score is 3.6, indicating a low severity impact primarily on confidentiality and integrity.

CVE-2026-70683 is a vulnerability in Oracle Hyperion Calculation Manager version 11.2.25.0.000 that allows an unauthenticated attacker with network access via HTTP to potentially perform unauthorized update, insert, or delete operations on accessible data. Exploitation requires human interaction from a user other than the attacker. The vulnerability has a CVSS 3.1 base score of 4.3, indicating a medium severity with integrity impact but no confidentiality or availability impact.

CVE-2026-70682 is a low-severity vulnerability in Oracle Hyperion Calculation Manager version 11.2.25.0.000. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to some accessible data within the product. The vulnerability is difficult to exploit and does not impact integrity or availability.

CVE-2026-70679 is a medium severity vulnerability in Oracle Hyperion Calculation Manager version 11.2.25.0.000. It allows an unauthenticated attacker with network access via HTTP to perform unauthorized update, insert, or delete operations on accessible data within the product. The vulnerability impacts data integrity but does not affect confidentiality or availability. Oracle has published a Critical Security Patch Update advisory covering this and many other vulnerabilities, recommending timely patching.

CVE-2026-70678 is a high-severity vulnerability in Oracle Hyperion Calculation Manager version 11.2.25.0.000. It allows a low-privileged attacker with network access via HTTP to compromise the product. Successful exploitation requires user interaction from someone other than the attacker and can lead to unauthorized access or modification of critical data within Oracle Hyperion Calculation Manager. The vulnerability also has scope to impact additional Oracle products. The CVSS 3.1 base score is 7.6, reflecting high confidentiality impact and limited integrity impact.

CVE-2026-70677 is a vulnerability in Oracle Hyperion Calculation Manager version 11.2.25.0.000 that allows an unauthenticated attacker with network access via HTTP to potentially compromise the product. Exploitation is difficult and requires human interaction from a person other than the attacker. Successful exploitation can lead to unauthorized access to critical data and unauthorized update, insert, or delete operations on some accessible data. The vulnerability has a CVSS 3.1 base score of 5.9, indicating medium severity.

CVE-2026-62606 is a low-severity vulnerability in Oracle Hyperion Calculation Manager version 11.2.25.0.000. It allows a low privileged attacker with network access via HTTP to gain unauthorized read access to some accessible data within the product. The vulnerability is difficult to exploit and does not impact integrity or availability.

CVE-2026-62602 is a high-severity vulnerability in Oracle Hyperion Calculation Manager version 11.2.25.0.000. It allows an unauthenticated attacker with access to the physical communication segment of the hardware running the product to compromise it. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data accessible by the product, with significant confidentiality and integrity impacts. The vulnerability has a CVSS 3.1 base score of 8.0 and affects the confidentiality and integrity of data but does not impact availability. Oracle has published a Critical Security Patch Update advisory covering this and many other vulnerabilities but does not explicitly confirm patch availability for this specific version in the provided data.

CVE-2026-62582 is a critical vulnerability in Oracle Hyperion Calculation Manager version 11.2.25.0.000. It allows a low privileged attacker with network access via HTTP to compromise the product, potentially affecting additional Oracle products. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data within Oracle Hyperion Calculation Manager. The vulnerability has a CVSS 3.1 base score of 9.6, indicating high confidentiality and integrity impacts without availability impact.