CVE-2026-70889

CVE-2026-70889 affects Oracle Hyperion Data Relationship Management v11.2.25.0.000, specifically the Access and security component. An unauthenticated remote attacker can exploit this via HTTP to gain unauthorized read access to all accessible data (CVSS 7.5, HIGH). Exploitation details are not p...

EUVD-2026-61834

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-70885

Oracle Hyperion Data Relationship Management 11.2.25.0.000 has a HIGH-severity (CVSS 8.5) access and security flaw exploitable via HTTP by a low-privileged attacker, potentially causing product takeover and scope change. No exploit or patch details are provided; monitor Oracle's August 2026 CPU f...

EUVD-2026-61836

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-70887

...

CVE-2026-70884

Oracle Hyperion DRM 11.2.25.0.000's Access and security component is critically vulnerable (CVSS 9.1) to unauthenticated SOAP-based attacks enabling full confidentiality and integrity compromise. No exploit code or in-the-wild exploitation details are provided. Patch availability is not specified...

CVE-2026-70882

Oracle Hyperion Data Relationship Management 11.2.25.0.000 (Access and security component) is affected by a HIGH-severity vulnerability (CVSS 8.7) exploitable by a low-privileged network attacker via HTTP, requiring user interaction, enabling unauthorized read/write access to critical data with s...

EUVD-2026-61828

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle...

CVE-2026-70879

Oracle Hyperion Data Relationship Management 11.2.25.0.000 is affected by a high-severity (CVSS 7.8) local vulnerability in its Access and security component. A low-privileged attacker with host logon can achieve full takeover with scope change, impacting additional products. No specific root cau...

CVE-2026-70878

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-61825

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTPS to compromise Oracle...

CVE-2026-70877

A CVSS 8.8 HIGH-severity flaw in Oracle Hyperion Data Relationship Management 11.2.25.0.000 (Access and security component) allows low-privileged, network-authenticated attackers via HTTP to fully compromise the application (C/H/I/A all High). Oracle's August 2026 CPU advisory is the patch refere...

EUVD-2026-61826

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-61824

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-61822

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle...

EUVD-2026-61823

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-70870

Oracle Hyperion Data Relationship Management 11.2.23.0.000, Web Client - Unicode component, is vulnerable to unauthenticated HTTP attacks allowing full data access and partial DoS. CVSS 8.2 HIGH (C:H/A:L). Patch details are not provided; no exploitation reported. See Oracle CSP Aug 2026 advisory....

CVE-2026-70871

Oracle Hyperion Data Relationship Management version 11.2.25.0.000 has an unauthenticated, easily exploitable vulnerability in its Access and security component via TCP, allowing full product takeover with CVSS 9.8. Exploitation in the wild is not documented; Oracle's August 2026 security alert s...

CVE-2026-70868

Oracle Application Testing Suite 13.3.0.1 has a HIGH-severity (CVSS 8.1) network-reachable flaw exploitable by unauthenticated attackers via HTTP, potentially allowing full system takeover. Oracle published patch guidance in its August 2026 security advisory (cspuaug2026.html). No exploitation de...

CVE-2026-70866

Oracle Application Testing Suite version 13.3.0.1 is affected by a local privilege escalation vulnerability exploitable by a low-privileged attacker with the "Load Testing for Web Apps" privilege. The flaw carries a CVSS 3.1 Base Score of 7.8 (HIGH) with full confidentiality, integrity, and avail...