Threat Intelligence Database

CVE-2026-70794 is a vulnerability in Oracle Hyperion Financial Reporting version 11.2.25.0.000. It allows a low privileged attacker with logon access to the infrastructure where the product runs to potentially compromise the application. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical or accessible data. The vulnerability has a CVSS 3.1 base score of 4.7, indicating a medium severity with integrity impact only. The vulnerability is difficult to exploit and requires high attack complexity and local access with low privileges.

CVE-2026-70793 is a vulnerability in Oracle Hyperion Financial Reporting version 11.2.25.0.000. It allows a low privileged attacker with network access via HTTP to perform unauthorized read and write operations on some accessible data. The vulnerability is difficult to exploit and has a medium severity with a CVSS 3.1 base score of 4.2.

CVE-2026-70789 is a vulnerability in Oracle Hyperion Financial Reporting version 11.2.25.0.000. It allows an unauthenticated attacker with network access via HTTP to potentially compromise the system. Exploitation is difficult and requires human interaction from a person other than the attacker. Successful exploitation can lead to unauthorized access to critical data and unauthorized update, insert, or delete operations on some accessible data. The CVSS 3.1 base score is 5.9, indicating a medium severity vulnerability.

CVE-2026-70788 is a vulnerability in Oracle Hyperion Financial Reporting version 11.2.25.0.000. It allows an unauthenticated attacker with network access via HTTP to perform unauthorized read and write operations on accessible data. The vulnerability has a CVSS 3.1 base score of 6.5, indicating medium severity, with impacts on confidentiality and integrity but no impact on availability. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update advisory but has not explicitly provided a direct patch link for this specific version in the input data.

CVE-2026-70787 is a high-severity vulnerability in Oracle Hyperion Financial Reporting version 11.2.25.0.000. It allows a low privileged attacker with network access via HTTP to compromise the product, potentially leading to full takeover. The vulnerability impacts confidentiality, integrity, and availability. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update, which contains numerous security fixes across many products.

CVE-2026-70785 is a vulnerability in Oracle Hyperion Financial Reporting version 11.2.25.0.000 that allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to some accessible data. The vulnerability is difficult to exploit and impacts confidentiality without affecting integrity or availability. The CVSS 3.1 base score is 3.7, indicating a low severity issue. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update, which contains numerous security fixes across multiple products.

CVE-2026-70784 is a vulnerability in Oracle Hyperion Financial Reporting version 11.2.25.0.000. It allows a low privileged attacker with logon access to the infrastructure where the product runs to potentially compromise the application. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical or accessible data, as well as unauthorized read access to some data. The vulnerability is rated with a CVSS 3.1 base score of 5.3, indicating medium severity. The attack vector requires local access with high attack complexity and low privileges, without user interaction.

CVE-2026-70780 is a vulnerability in Oracle Hyperion Financial Reporting version 11.2.25.0.000. It allows an unauthenticated attacker with physical access to the communication segment attached to the hardware running the software to compromise the system. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data accessible by Oracle Hyperion Financial Reporting. The vulnerability has a CVSS 3.1 base score of 6.8, indicating a medium severity level with high confidentiality and integrity impacts but no availability impact.

CVE-2026-70776 is a low-severity vulnerability in Oracle Hyperion Financial Reporting version 11.2.25.0.000. It allows a low-privileged attacker with network access via HTTP to perform unauthorized update, insert, or delete operations on accessible data. Exploitation requires human interaction from a user other than the attacker and is considered difficult to exploit. The vulnerability impacts data integrity but not confidentiality or availability.

CVE-2026-70769 is a vulnerability in Oracle Hyperion Financial Reporting version 11.2.25.0.000. It allows an unauthenticated attacker with network access via HTTP to potentially gain unauthorized access to critical data or full access to all accessible data within Oracle Hyperion Financial Reporting. The attacker may also perform unauthorized update, insert, or delete operations on some data. The vulnerability is rated with a CVSS 3.1 base score of 6.5, indicating a medium severity level.