CVE-2026-70847

Oracle HFM 11.2.25.0.000 Security component has a medium-severity local vulnerability (CVSS 6.5) allowing a low-privileged local attacker to access all HFM data. No root cause or patch details are provided in the documents; exploitation details are not available.