CVE-2020-6950

Summary of CVE-2020-6950 (Eclipse Mojarra Local File Read) The Nuclei template confirms a directory traversal vulnerability in Eclipse Mojarra before 2.3.14 that allows reading arbitrary files via the loc or con parameter. Affected component is Mojarra (JavaServer Faces) in versions prior to 2.3....

CVE-2026-61206

Oracle Hyperion Calculation Manager 11.2.25.0.000 has a Security component flaw allowing a low-privileged, network-based attacker to compromise the application and pivot to other products, yielding full Confidentiality, Integrity, and Availability impact (CVSS 9.9). Oracle's August 2026 Critical ...

CVE-2026-62459

CVE-2026-62459 affects Oracle Hyperion Calculation Manager Security component at version 11.2.25.0.000, scored HIGH (CVSS 7.2) with scope change, enabling network-based attacks with high privileges to compromise confidentiality, integrity and availability. No exploitation details are provided; Or...

CVE-2026-62598

Oracle Hyperion Calculation Manager version 11.2.25.0.000 is affected by a HIGH severity (CVSS 8.2) security component vulnerability exploitable via SFTP by a low-privileged remote attacker, enabling unauthorized read/write access to all application data with potential scope impact on additional ...

CVE-2026-61259

CVE-2026-61259 affects Oracle Hyperion Calculation Manager version 11.2.25.0.000 (component: Security). A low-privileged attacker with network access via HTTP can exploit this vulnerability without user interaction to gain unauthorized access to all accessible data and cause a partial denial of s...

CVE-2026-62441

Oracle Hyperion Calculation Manager 11.2.25.0.000 has an easily exploitable Security-component flaw; a low-privilege network attacker via HTTP can gain unauthorized read and write access to some application data. Oracle's CSPU August 2026 advisory likely contains remediation details.

CVE-2026-62460

Oracle Hyperion Calculation Manager 11.2.25.0.000 Security component has a low-complexity network vulnerability exploitable by low-privileged HTTP attackers, enabling unauthorized read access to a subset of data with scope change affecting other products; no in-the-wild exploitation reported. Det...

CVE-2026-61276

Oracle Hyperion Calculation Manager (version 11.2.25.0.000 ) has a vulnerability in its Security component that allows a low-privileged attacker with network access via HTTP to achieve full takeover of the product, impacting confidentiality, integrity, and availability (CVSS 3.1: 8.8 HIGH ). CISA...

CVE-2026-62582

Oracle Hyperion Calculation Manager 11.2.25.0.000 has a critical Security-component flaw (CVSS 9.6) exploitable via HTTP by low-privileged attackers, enabling unauthorized data access and modification with scope change to other products. No exploit code is available. Apply the Oracle August 2026 ...

CVE-2026-61313

The Security component of Oracle Hyperion Calculation Manager version 11.2.25.0.000 is affected by a local, easily exploitable vulnerability requiring high privileges, rated CVSS 3.1 6.7 (MEDIUM). Successful exploitation can grant unauthorized access to critical data and cause scope change impact...

CVE-2026-62602

Oracle Hyperion Calculation Manager 11.2.25.0.000 has a Security component vulnerability (CVSS 8.0, HIGH) allowing unauthenticated attackers on the local network segment to compromise the application with scope change, enabling unauthorized data access, creation, deletion and modification. No exp...

CVE-2026-61342

CVE-2026-61342 affects Oracle Hyperion Calculation Manager version 11.2.25.0.000, specifically its Security component. An unauthenticated attacker with network HTTP access can exploit it with high attack complexity and user interaction to gain unauthorized access to critical or all accessible dat...

CVE-2026-62532

Oracle Hyperion Calculation Manager version 11.2.25.0.000 has a Security component flaw exploitable via SQL by a high-privileged network attacker, allowing unauthorized read and update/insert/delete access to a subset of application data (CVSS 3.8, LOW). No patch version or remediation details ar...

CVE-2026-62580

CVE-2026-62580 affects Oracle Hyperion Calculation Manager 11.2.25.0.000 Security component. A low-privileged attacker with physical network access can perform unauthorized update/insert/delete on some accessible data (CVSS 2.6, Low). No fix version or exploit details are provided in the documents.

CVE-2026-70678

Oracle Hyperion Calculation Manager version 11.2.25.0.000 (Security component) is affected by a vulnerability allowing a low-privileged attacker with network access via HTTP to compromise the product. Successful exploitation requires user interaction from a person other than the attacker. Due to ...

CVE-2026-61293

CVE-2026-61293 affects Oracle Hyperion Calculation Manager 11.2.25.0.000 (Security component). An unauthenticated attacker with network access via HTTP can compromise the application, with CVSS 8.1 (HIGH) impact on confidentiality, integrity, and availability. Oracle's CSPRAug2026 advisory is the...

CVE-2026-62461

Oracle Hyperion Calculation Manager version 11.2.25.0.000 has a Security component flaw exploitable by an unauthenticated remote attacker over HTTP, requiring victim interaction, that can lead to unauthorized read access to a subset of application data (CVSS 3.1 LOW, C:L/I:N/A:N). The Oracle Augu...

CVE-2026-62529

The Security component of Oracle Hyperion Calculation Manager (affected version 11.2.25.0.000) contains an easily exploitable flaw: a low-privileged attacker with network HTTP access can trigger unauthorized update, insert, or delete access to some application data, requiring human interaction fr...

CVE-2026-62578

Oracle Hyperion Calculation Manager 11.2.25.0.000 (Security component) is affected by a medium-severity flaw exploitable by an unauthenticated attacker on an adjacent network segment, enabling unauthorized access to all accessible data. No exploit or patch details are provided; monitoring Oracle'...

CVE-2026-62606

Oracle Hyperion Calculation Manager 11.2.25.0.000 Security component has a network-based vulnerability (CVSS 3.1, LOW) allowing low-privileged attackers to gain unauthorized read access to a subset of data. No exploit or patch details are provided; see Oracle's advisory: https://www.oracle.com/se...

CVE-2026-70682

Oracle Hyperion Calculation Manager 11.2.25.0.000 has a LOW-severity (CVSS 3.7) flaw in its Security component, exploitable remotely via HTTP by unauthenticated attackers to gain limited unauthorized read access to application data. No exploit details or patch version are provided in the document...

CVE-2026-62446

An unauthenticated, network-accessible HTTP vulnerability in Oracle Hyperion Calculation Manager version 11.2.25.0.000 allows attackers to read a subset of accessible data. CVSS 3.1 scores it MEDIUM (5.3). Exploitation details and remediation patches are not provided in the documents; monitor Ora...

CVE-2026-62533

Oracle Hyperion Calculation Manager (component: Security) version 11.2.25.0.000 is affected by a low-severity (CVSS 3.7) unauthenticated, network-based vulnerability allowing limited unauthorized read access to application data. Oracle's August 2026 CPU advisory is the primary reference; no explo...

CVE-2026-70676

The Oracle Hyperion Calculation Manager Security component (version 11.2.25.0.000) is vulnerable to a CVSS 7.0 HIGH-severity flaw exploitable via HTTP by an unauthenticated remote attacker with high attack complexity, enabling unauthorized data read/write and partial DoS. No exploit code or in-th...

CVE-2026-70685

Affected component: Oracle Hyperion Calculation Manager Security component, version 11.2.25.0.000. Root cause: unauthenticated attacker with local infrastructure access can compromise the application. Impact: high confidentiality breach and low integrity impact, with scope change affecting additi...

CVE-2026-60858

Oracle Hyperion Calculation Manager 11.2.25.0.000 has a critical (CVSS 9.8) Security component flaw exploitable by an unauthenticated, network-based HTTP attacker, enabling full compromise (C/I/A impacts). No exploitation evidence or patch version is provided; Oracle's August 2026 CPU advisory is...

CVE-2026-70679

Oracle Hyperion Calculation Manager 11.2.25.0.000 has an easily exploitable flaw in its Security component; an unauthenticated remote attacker via HTTP can gain unauthorized update/insert/delete access to application data (CVSS 5.3, integrity-only impact). Patch status is not specified in the pro...

CVE-2026-70683

Oracle Hyperion Calculation Manager 11.2.25.0.000 has an unauthenticated, easily exploitable Security component flaw via HTTP requiring human interaction; successful attacks cause unauthorized update/insert/delete access to some accessible data. Exploitation details not provided. Patch status not...

CVE-2026-62604

Oracle Hyperion Calculation Manager (component: Security), version 11.2.25.0.000 , is affected by a vulnerability that allows an unauthenticated attacker with access to the physical communication segment attached to the host hardware to achieve unauthorized read access to a subset of accessible d...

CVE-2026-70705

The affected product is Oracle Hyperion Calculation Manager (Security component), version 11.2.25.0.000. CVSS 3.1 vector AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N yields a HIGH score of 7.1, reflecting high confidentiality impact with scope change. An unauthenticated attacker with infrastructure-level ...

CVE-2026-62571

Oracle Hyperion Calculation Manager (component: Security ) version 11.2.25.0.000 is affected by an easily exploitable vulnerability that allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data or complete access to all accessible data. The vulner...

CVE-2026-62603

Oracle Hyperion Calculation Manager 11.2.25.0.000's Security component is affected by a medium-severity flaw (CVSS 5.4). An unauthenticated attacker with physical access to the hardware's communication segment can gain unauthorized read and write access to some application data. Oracle's August 2...

CVE-2026-70719

Oracle Hyperion Calculation Manager 11.2.25.0.000 has a Security component flaw allowing an unauthenticated local attacker to read a subset of accessible data. CVSS 3.1 scores it MEDIUM (4.0). Oracle's August 2026 CPU advisory is referenced for patch details.

CVE-2026-61281

Oracle Hyperion Calculation Manager 11.2.25.0.000's Security component is vulnerable to unauthenticated HTTP exploitation (CVSS 8.1), enabling unauthorized data access, modification, and deletion. No root cause or fix details are provided in the documents; Oracle's August 2026 security alert is t...

CVE-2026-70677

CVE-2026-70677 affects Oracle Hyperion Calculation Manager (Security component) version 11.2.25.0.000, with CVSS 3.1 score 5.9 (MEDIUM). Exploitation requires an unauthenticated attacker with network HTTP access and human interaction, leading to unauthorized data access and limited modification. ...

CVE-2026-70711

Oracle Hyperion Calculation Manager version 11.2.25.0.000 has a Security-component vulnerability (CVSS 3.6, Low). Exploitation requires local infrastructure access, high complexity, and human interaction, enabling unauthorized read and limited write/delete access to some accessible data. No patch...

CVE-2026-70714

CVE-2026-70714 affects Oracle Hyperion Calculation Manager version 11.2.25.0.000 in its Security component. A locally authenticated, high-privileged attacker can cause unauthorized creation, deletion, or modification of critical or all accessible data. CVSS 3.1 score is 4.1 (Medium). No exploitat...