CVE-2026-70840

A HIGH-severity (CVSS 8.4) flaw exists in Oracle Hyperion Financial Management's Security component, affecting version 11.2.25.0.000. An attacker with low privileges and local access can exploit it to gain unauthorized read/write access to all accessible HFM data, with scope extending beyond the ...