Threat Intelligence Database

CVE-2026-70973 is a vulnerability in Oracle Hyperion Infrastructure Technology version 11.2.25.0.000. It allows a low privileged attacker with network access via HTTP to potentially take over the affected product. The vulnerability is difficult to exploit but can lead to full compromise of confidentiality, integrity, and availability. The CVSS 3.1 base score is 7.5, indicating high severity.

CVE-2026-70972 is a vulnerability in Oracle Hyperion Infrastructure Technology version 11.2.25.0.000. It allows a low privileged attacker with network access via HTTP to potentially compromise the product. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or complete access to all data accessible by Oracle Hyperion Infrastructure Technology. The vulnerability has a CVSS 3.1 base score of 6.8, indicating a medium severity level.

CVE-2026-70971 is a vulnerability in Oracle Hyperion Infrastructure Technology version 11.2.25.0.000. It allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data or full access to all accessible data. The attacker can also perform unauthorized update, insert, or delete operations on some data. The vulnerability has a CVSS 3.1 base score of 7.1, indicating high severity. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update, which contains numerous security fixes across multiple products.

CVE-2026-70968 is a vulnerability in Oracle Hyperion Infrastructure Technology version 11.2.25.0.000. It allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data or potentially all accessible data within the product. The vulnerability affects the Installation and Configuration component and has a CVSS 3.1 base score of 6.5, indicating a medium severity with a high confidentiality impact but no impact on integrity or availability.

CVE-2026-70967 is a vulnerability in Oracle Hyperion Infrastructure Technology version 11.2.25.0.000. It allows a low privileged attacker with logon access to the infrastructure to compromise the product. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or complete access to all accessible data within Oracle Hyperion Infrastructure Technology. The vulnerability has a CVSS 3.1 base score of 7.1, indicating high severity with significant confidentiality and integrity impacts.

CVE-2026-70966 is a high-severity vulnerability in Oracle Hyperion Infrastructure Technology version 11.2.25.0.000. It allows a low privileged attacker with network access via HTTP to compromise the product, potentially leading to full takeover. The vulnerability affects confidentiality, integrity, and availability with a CVSS 3.1 base score of 8.8. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update, which provides targeted security fixes. Customers are strongly advised to apply the relevant patches promptly to mitigate the risk.

CVE-2026-70965 is a high-severity vulnerability in Oracle Hyperion Infrastructure Technology version 11.2.25.0.000. It allows a low privileged attacker with network access via HTTP to compromise the product, potentially leading to full takeover. The vulnerability affects confidentiality, integrity, and availability with a CVSS 3.1 base score of 8.8. Oracle has included this fix in its August 2026 Critical Security Patch Update (CSPU).

CVE-2026-70964 is a high-severity vulnerability in Oracle Hyperion Infrastructure Technology version 11.2.25.0.000. It allows a low privileged attacker with network access via HTTP to compromise the product, potentially impacting additional Oracle products. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, resulting in complete confidentiality and integrity compromise of accessible data. The vulnerability is difficult to exploit and does not impact availability. Oracle has released a Critical Security Patch Update addressing this and many other vulnerabilities.

CVE-2026-70963 is a vulnerability in Oracle Hyperion Infrastructure Technology version 11.2.25.0.000. It allows a low privileged attacker with network access via HTTP to perform unauthorized read and write operations on some accessible data. The vulnerability is difficult to exploit and has a medium severity with a CVSS 3.1 base score of 4.2.

CVE-2026-70962 is a vulnerability in Oracle Hyperion Infrastructure Technology version 11.2.25.0.000. It allows a low privileged attacker with logon access to the infrastructure where the product runs to gain unauthorized read access to some accessible data. The vulnerability has a low CVSS score of 3.3, indicating limited confidentiality impact without integrity or availability effects. No known exploits are reported in the wild. Oracle has included this fix in its August 2026 Critical Security Patch Update.