CVE-2026-62554

Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 has an easily exploitable, unauthenticated HTTP-accessible vulnerability in its Installation and Configuration component, enabling unauthorized access to critical data (CVSS 7.5 HIGH). No patch or exploit details are provided; Oracle...

CVE-2026-62554

...

CVE-2026-62545

...

CVE-2026-62543

...

CVE-2026-62540

...

CVE-2026-62539

A critical unauthenticated remote vulnerability (CVSS 9.8) exists in Oracle Hyperion Infrastructure Technology's Installation and Configuration component (version 11.2.25.0.000). An attacker with HTTP network access can fully compromise the application, impacting confidentiality, integrity, and a...

CVE-2026-62537

...

CVE-2026-62531

Oracle Hyperion Infrastructure Technology component Lifecycle Management (version 11.2.25.0.000) is affected by a HIGH-severity (CVSS 8.1) vulnerability exploitable by an unauthenticated attacker over HTTP, potentially resulting in full system takeover. No exploitation details are provided in the...

CVE-2026-62531

...

CVE-2026-62532

...

CVE-2026-62523

...

CVE-2026-62520

...

CVE-2026-62520

CVE-2026-62520 affects Oracle Hyperion Infrastructure Technology (component: Common Events ), version 11.2.25.0.000 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized read and write (update/insert/delete) access to a subset of accessible...

CVE-2026-62511

CVE-2026-62511 affects Oracle Hyperion Infrastructure Technology 11.2.25.0.000 (Installation and Configuration component). It requires local access, high privileges, and high complexity, yielding CVSS 3.0 (LOW) with only low confidentiality and integrity impact. No exploit or detailed root cause ...

CVE-2026-62512

...

CVE-2026-62512

Oracle Siebel CRM Cloud Applications (component: Siebel Cloud Manager), versions 22.3 through 26.6, contain a critical (CVSS 9.9) flaw exploitable over HTTP by a low-privileged attacker, enabling full system compromise with scope change affecting additional products. No exploitation details are p...

CVE-2026-62510

Affected product: Oracle Hyperion Infrastructure Technology version 11.2.25.0.000. Root cause: unspecified flaw in the Installation and Configuration component. Impact: unauthenticated remote attacker can obtain limited read access to application data over HTTP (CVSS 5.3, MEDIUM). No patch versio...

CVE-2026-62500

...

CVE-2026-62492

Oracle Hyperion Infrastructure Technology (component: Common Security), affected version 11.2.25.0.000, contains a HIGH-severity vulnerability (CVSS 7.4) exploitable via HTTPS by an unauthenticated network attacker. Successful exploitation can result in unauthorized creation, deletion, or modific...

CVE-2026-62467

Oracle Hyperion Infrastructure Technology 11.2.25.0.000, component "Common Events," is affected by a HIGH-severity flaw (CVSS 7.7, S:C/C:H/I:N/A:N). A low-privileged network attacker via HTTP can gain unauthorized access to critical data, with scope change potentially impacting additional product...