CVE-2026-70857

...

CVE-2026-70842

Oracle Hyperion Financial Management v11.2.25.0.000 (Security component) is affected by an easily exploitable local vulnerability (CVSS 8.4 HIGH). A low-privileged attacker with infrastructure access can compromise the product, achieving unauthorized read/write access to all accessible data, with...

CVE-2026-70832

...

CVE-2026-70828

Oracle Hyperion Financial Management 11.2.25.0.000 Security component is vulnerable to a HIGH-severity (CVSS 7.7) flaw exploitable over HTTP by a low-privileged attacker, allowing unauthorized access to critical data with scope change affecting other products. No in-the-wild exploitation details ...

CVE-2026-70829

...

CVE-2026-70822

CVE-2026-70822 affects the Security component of Oracle Hyperion Financial Management version 11.2.25.0.000 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data or complete access to all data accessible through the ...

CVE-2026-70822

...

CVE-2026-70812

A HIGH-severity vulnerability (CVSS 8.8) affects Oracle Call Center Technology within Oracle E-Business Suite, component "Internal Operations," in versions 12.2.3 through 12.2.15. An unauthenticated-to-low-privileged attacker with HTTP network access can exploit it to fully compromise the product...

CVE-2026-70812

...

CVE-2026-70798

CVE-2026-70798 affects Oracle E-Business Suite Purchasing (Internal Operations component), versions 12.2.3–12.2.15. A low-privileged local attacker can easily exploit it to take over Oracle Purchasing, with full confidentiality, integrity, and availability impact (CVSS 7.8 HIGH). No exploit detai...

CVE-2026-70794

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) contains a local integrity vulnerability; a low-privileged local attacker can modify or delete critical data. CVSS 3.1 scores 4.7 (Medium). Exploitation requires local infrastructure access; no exploit details are provided. Apply ...

CVE-2026-70795

...

CVE-2026-70785

...

CVE-2026-70767

Oracle Hyperion Financial Reporting Server version 11.2.25.0.000 has an easily exploitable flaw allowing a low-privileged network attacker via HTTP to gain unauthorized access to critical or all product data (CVSS 6.5, confidentiality-only impact). No root cause or in-the-wild exploitation detail...

CVE-2026-70765

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) is vulnerable to an unauthenticated, low-complexity HTTP attack requiring human interaction. CVSS 3.1 scores it 6.1 (Medium) with scope change, enabling unauthorized read and update/insert/delete access to some product data. Explo...

CVE-2026-70765

...

CVE-2026-70759

Oracle Hyperion Financial Reporting Server (affected version 11.2.25.0.000) has a medium-severity (CVSS 5.4) flaw exploitable via unauthenticated HTTP access, requiring user interaction, enabling unauthorized read, update, insert, and delete access to accessible data. Oracle's August 2026 securit...

CVE-2026-70753

A low-privileged, network-accessible attacker can exploit a flaw in the Server component of Oracle Hyperion Financial Reporting 11.2.25.0.000 via HTTP, requiring only user interaction, to read all accessible data and perform limited unauthorized updates. Oracle's August 2026 security advisory is ...

CVE-2026-70751

...

CVE-2026-70744

Oracle Hyperion Financial Reporting 11.2.25.0.000 Server component has a HIGH severity (CVSS 8.1) unauthenticated remote vulnerability exploitable via HTTP, potentially leading to full product compromise; no exploit or in-the-wild activity details are provided in the documents.