CVE-2026-70895

...

CVE-2026-70892

Affected product: Oracle Hyperion Data Relationship Management version 11.2.25.0.000, component "Access and security." Root cause: unspecified, described as "difficult to exploit." Impact: CVSS 8.2 (High) — low-privileged network attacker can gain unauthorized read/write access to critical data w...

CVE-2026-70841

The Oracle Security Alert (CSPAug2026) referenced in the documents is not publicly accessible, so no patch version or remediation guidance can be confirmed. Affected version 11.2.25.0.000 has CVSS 5.6; no exploit code is provided. Monitor Oracle advisory for patch details.

CVE-2026-70840

...

CVE-2026-70838

...

CVE-2026-70803

...

CVE-2026-70795

...

CVE-2026-70778

...

CVE-2026-70768

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) has a medium-severity (CVSS 6.1) HTTP-based vulnerability exploitable by unauthenticated attackers, enabling unauthorized read/write access to data with scope change; no exploitation details are provided. Oracle's August 2026 CPU ...

CVE-2026-70734

...

CVE-2026-70696

Oracle Payments (component: File Transmission) in Oracle E-Business Suite versions 12.2.3–12.2.15 is vulnerable to an unauthenticated, network-based TCP attack (CVSS 7.5 HIGH). Successful exploitation grants unauthorized access to critical data or full Oracle Payments dataset, impacting confident...

CVE-2026-70694

...

CVE-2026-70685

Affected component: Oracle Hyperion Calculation Manager Security component, version 11.2.25.0.000. Root cause: unauthenticated attacker with local infrastructure access can compromise the application. Impact: high confidentiality breach and low integrity impact, with scope change affecting additi...

CVE-2026-70683

...

CVE-2026-62626

Oracle Reports Developer 12.2.1.19.0 (component: Security and Authentication) is vulnerable to an unauthenticated, network-accessible HTTP exploit allowing full system takeover (CVSS 9.8). Oracle's August 2026 CPU addresses this; no public exploit code is documented. Organizations running affecte...

CVE-2026-62588

...

CVE-2026-62555

...

CVE-2026-62552

...

CVE-2026-62531

Oracle Hyperion Infrastructure Technology component Lifecycle Management (version 11.2.25.0.000) is affected by a HIGH-severity (CVSS 8.1) vulnerability exploitable by an unauthenticated attacker over HTTP, potentially resulting in full system takeover. No exploitation details are provided in the...

CVE-2026-62471

Oracle Hyperion Infrastructure Technology 11.2.25.0.000 has a HIGH-severity (CVSS 8.1) flaw in its Common Events component. An unauthenticated remote attacker can exploit it via HTTP to fully compromise the application (confidentiality, integrity, availability). No exploitation details or patch v...