36295 matches found
CVE-2026-62564
A local low-privileged attacker can exploit a flaw in the Installation and Configuration component of Oracle Hyperion Infrastructure Technology (affected version 11.2.25.0.000) to gain unauthorized access to all accessible data; CVSS 3.1 score 5.5 (MEDIUM), with high confidentiality impact only. ...
CVE-2026-62552
...
CVE-2026-62554
Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 has an easily exploitable, unauthenticated HTTP-accessible vulnerability in its Installation and Configuration component, enabling unauthorized access to critical data (CVSS 7.5 HIGH). No patch or exploit details are provided; Oracle...
CVE-2026-62554
...
CVE-2026-62545
...
CVE-2026-62543
...
CVE-2026-62540
...
CVE-2026-62539
A critical unauthenticated remote vulnerability (CVSS 9.8) exists in Oracle Hyperion Infrastructure Technology's Installation and Configuration component (version 11.2.25.0.000). An attacker with HTTP network access can fully compromise the application, impacting confidentiality, integrity, and a...
CVE-2026-62537
...
CVE-2026-62531
Oracle Hyperion Infrastructure Technology component Lifecycle Management (version 11.2.25.0.000) is affected by a HIGH-severity (CVSS 8.1) vulnerability exploitable by an unauthenticated attacker over HTTP, potentially resulting in full system takeover. No exploitation details are provided in the...
CVE-2026-62531
...
CVE-2026-62532
...
CVE-2026-62523
...
CVE-2026-62520
...
CVE-2026-62520
CVE-2026-62520 affects Oracle Hyperion Infrastructure Technology (component: Common Events ), version 11.2.25.0.000 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized read and write (update/insert/delete) access to a subset of accessible...
CVE-2026-62511
CVE-2026-62511 affects Oracle Hyperion Infrastructure Technology 11.2.25.0.000 (Installation and Configuration component). It requires local access, high privileges, and high complexity, yielding CVSS 3.0 (LOW) with only low confidentiality and integrity impact. No exploit or detailed root cause ...
CVE-2026-62512
Oracle Siebel CRM Cloud Applications (component: Siebel Cloud Manager), versions 22.3 through 26.6, contain a critical (CVSS 9.9) flaw exploitable over HTTP by a low-privileged attacker, enabling full system compromise with scope change affecting additional products. No exploitation details are p...
CVE-2026-62512
...
CVE-2026-62510
Affected product: Oracle Hyperion Infrastructure Technology version 11.2.25.0.000. Root cause: unspecified flaw in the Installation and Configuration component. Impact: unauthenticated remote attacker can obtain limited read access to application data over HTTP (CVSS 5.3, MEDIUM). No patch versio...