CVE-2021-4104

CVE-2021-4104 affects JMSAppender in Log4j 1.2 when it is explicitly configured to use JMSAppender. A deserialization of untrusted data can occur if an attacker can write Log4j configuration and supply TopicBindingName and TopicConnectionFactoryBindingName, causing JMSAppender to perform JNDI req...

CVE-2021-45105

Summary of CVE-2021-45105 (Log4j2) : Affected Log4j 2.x versions 2.0-alpha1 through 2.16.0 (except 2.12.3 and 2.3.1) are vulnerable to denial of service via uncontrolled recursion triggered by self-referential lookups in Thread Context Map data. The root cause is improper handling of self-referen...

CVE-2022-23302

CVE-2022-23302 affects Log4j 1.x JMSSink. TheDeserialization flaw allows remote code execution when an attacker can write to the Log4j configuration or when the configuration references an LDAP service the attacker controls. JMSSink can be triggered via a TopicConnectionFactoryBindingName to caus...

CVE-2022-23307

CVE-2022-23307 concerns a deserialization vulnerability in the Chainsaw component of Apache Log4j 1.x (Chainsaw bundled with Log4j 1.2.x). The root cause is unsafe deserialization of untrusted data via Chainsaw, allowing potential code execution. Multiple Atlassian products initially bundled Chai...

CVE-2022-23305

CVE-2022-23305 concerns Apache Log4j 1.x when configured with JDBCAppender: an SQL statement is built from a PatternLayout-converted value (notably %m), allowing an attacker to craft input to alter and potentially execute SQL. The issue is specific to Log4j 1.x if JDBCAppender is used; JDBCAppend...

CVE-2020-7760

This CVE-2020-7760 affects CodeMirror prior to 5.58.2 (and org.apache.marmotta.webjars:codemirror) with a ReDOs vulnerability in a JavaScript mode regex (sub-pattern (s|/. ?/) ). IBM’s bulletin confirms the same issue and notes watsonx.data is affected (version 2.2.1) and that remediation is to u...

CVE-2019-2927

CVE-2019-2927 concerns Oracle Hyperion Data Relationship Management (component: Access and Security). Affected product/version: Hyperion DRM 11.1.2.4. The issue is exploitable over HTTP with network access by a high-privilege attacker; user interaction is required for successful exploitation and ...

CVE-2025-21569

CVE-2025-21569 affects Oracle Hyperion Data Relationship Management 11.2.19.0.000 (Web Services). The vulnerability exists in the Web Services component and can allow a high-privileged attacker with network access via HTTP to compromise the system, potentially taking over the application. The CVS...

CVE-2018-2610

CVE-2018-2610 affects Oracle Hyperion Data Relationship Management, subcomponent Access and security , specifically the affected product/version: Hyperion Data Relationship Management 11.1.2.4.330. The vulnerability description states an unauthenticated attacker with network access over HTTP can ...

CVE-2018-2915

CVE-2018-2915 affects Oracle Hyperion Data Relationship Management (DRM), specifically the Access and security subcomponent in version 11.1.2.4.330. The available descriptions consistently state a vulnerability that an unauthenticated attacker can exploit over HTTPS to read data from DRM, with th...

CVE-2025-21568

CVE-2025-21568 affects Oracle Hyperion Data Relationship Management, component Access and Security , version 11.2.19.0.000. A high-privilege attacker with network access via HTTP can compromise the system; exploitation requires user interaction. Impact is unauthorized access to critical data or f...

CVE-2018-3208

Summary: CVE-2018-3208 affects the Oracle Hyperion Data Relationship Management component, specifically the Access and Security subcomponent, in version 11.1.2.4.345. The vulnerability is exploitable by a low-privilege attacker who has network access via HTTP, potentially leading to unauthorized ...

CVE-2026-70872

Oracle Hyperion Data Relationship Management (component: Access and security), version 11.2.25.0.000, is affected by an unauthenticated, network-reachable flaw (CVSS 9.1) enabling full confidentiality and integrity compromise of accessible data; no public exploit details are available. Patch guid...

CVE-2026-70880

Oracle Hyperion Data Relationship Management 11.2.25.0.000 has a critical flaw in its Access and security component. Unauthenticated attackers with network TCP access can fully compromise the application (CVSS 10.0), with potential scope change affecting additional products. Oracle's August 2026 ...

CVE-2026-70904

CVE-2026-70904 affects the Access and security component of Oracle Hyperion Data Relationship Management version 11.2.25.0.000 . An unauthenticated attacker with access to the adjacent physical communication segment can exploit this vulnerability with low complexity and no user interaction to ach...

CVE-2026-70883

Oracle Hyperion Data Relationship Management version 11.2.25.0.000 has a critical (CVSS 9.1) flaw in its Access and security component. An unauthenticated remote attacker over HTTP can gain unauthorized read/write access to all application data. Exploitation details are not provided; apply the Or...

CVE-2026-70890

Oracle Hyperion DRM 11.2.25.0.000 has an unauthenticated, easily exploitable HTTP access-and-security flaw (CVSS 7.5) allowing full confidentiality compromise; Oracle's August 2026 CPU advisory is referenced, but no patch or exploit details are provided in the documents.

CVE-2026-70887

Oracle Hyperion Data Relationship Management version 11.2.25.0.000 is vulnerable in its Access and security component. An unauthenticated attacker can exploit this via HTTP to gain unauthorized access to critical data and perform limited write operations. CVSS 3.1 score is 8.2 (HIGH). No exploita...

CVE-2026-70875

Oracle Hyperion Data Relationship Management v11.2.25.0.000 is affected in its Access and security component. A low-privileged, network-based HTTP attacker can exploit this high-complexity flaw (CVSS 7.5) to fully compromise the product, impacting confidentiality, integrity, and availability. Exp...

CVE-2026-70876

Oracle Hyperion Data Relationship Management 11.2.25.0.000 has a critical (CVSS 9.1) access and security component flaw allowing high-privileged network attackers to fully compromise the product and potentially additional products; no exploit or fix details are provided in the documents. Exploita...

CVE-2026-70884

Oracle Hyperion DRM 11.2.25.0.000's Access and security component is critically vulnerable (CVSS 9.1) to unauthenticated SOAP-based attacks enabling full confidentiality and integrity compromise. No exploit code or in-the-wild exploitation details are provided. Patch availability is not specified...

CVE-2026-70893

Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000 is vulnerable to a SQL-based attack exploitable by a low-privileged network attacker. CVSS 3.1 score is 8.2 (HIGH). Oracle's August 2026 CPU advisory provides patch details. Exploitation details ar...

CVE-2026-70895

Affected product: Oracle Hyperion Data Relationship Management, version 11.2.25.0.000, specifically the "Access and security" component. Root cause: Easily exploitable flaw allowing a low-privileged attacker with local infrastructure access to escalate privileges and access DRM data. Impact: Unau...

CVE-2026-70901

Oracle Hyperion DRM 11.2.25.0.000 has a HIGH-severity (CVSS 8.1) flaw in its Access and security component. An unauthenticated attacker with HTTP network access can compromise the application, gaining unauthorized read/write access to all DRM data, requiring only victim interaction. Oracle's Augu...

CVE-2026-70897

Oracle Hyperion Data Relationship Management 11.2.25.0.000 has an easily exploitable flaw in its Access and security component, allowing unauthenticated network attackers to gain unauthorized read access to critical data and limited write access to all accessible data (CVSS 8.2 HIGH). No exploita...

CVE-2026-70899

CVE-2026-70899 affects Oracle Hyperion Data Relationship Management version 11.2.25.0.000 , specifically the Access and security component. A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve full takeover of the application, resulting in high impact t...

CVE-2026-70873

Oracle Hyperion Data Relationship Management v11.2.25.0.000 is affected by a critical (CVSS 9.8) unauthenticated, network-accessible flaw in its Access and security component, enabling full system takeover (confidentiality, integrity, and availability impacts). Oracle's August 2026 CPU advisory i...

CVE-2026-70886

Oracle Hyperion DRM 11.2.25.0.000 is affected by a high-severity (CVSS 8.8) flaw in its Access and security component. A low-privileged attacker with HTTP network access can exploit it to fully compromise the application (C/H/I/A impacts). No exploit code or in-the-wild activity is reported; appl...

CVE-2026-70898

Oracle's August 2026 Critical Patch Update (referenced at oracle.com/security-alerts/cspuaug2026.html) provides patches for CVE-2026-70898, affecting the Access and security component of Hyperion DRM version 11.2.25.0.000. No in-the-wild exploitation or specific exploit details are provided in th...

CVE-2026-70900

Oracle Hyperion Data Relationship Management 11.2.25.0.000 has an access-and-security component flaw exploitable by an unauthenticated network attacker via HTTP, yielding CVSS 8.7 HIGH confidentiality and integrity impact. No exploit code or in-the-wild exploitation details are provided; remediat...

CVE-2026-70874

Oracle Hyperion Data Relationship Management version 11.2.25.0.000 has an easily exploitable flaw in its Access and security component. A low-privileged attacker with network HTTP access can achieve full compromise (confidentiality, integrity, availability). Oracle's August 2026 CPU provides the ...

CVE-2026-70877

A CVSS 8.8 HIGH-severity flaw in Oracle Hyperion Data Relationship Management 11.2.25.0.000 (Access and security component) allows low-privileged, network-authenticated attackers via HTTP to fully compromise the application (C/H/I/A all High). Oracle's August 2026 CPU advisory is the patch refere...

CVE-2026-70881

Oracle Hyperion DRM 11.2.25.0.000 has a HIGH (CVSS 8.1) flaw in its Access and security component, allowing a low-privilege network attacker via HTTP to gain unauthorized read and write access to all accessible data; no exploit details are provided, and Oracle's August 2026 security advisory is t...

CVE-2026-70896

An unauthenticated, network-accessible vulnerability in Oracle Hyperion Data Relationship Management's Access and security component (version 11.2.25.0.000) allows attackers to gain unauthorized read access to all application data; CVSS 3.1 scores it HIGH at 7.5. No exploitation or fix details ar...

CVE-2026-70882

Oracle Hyperion Data Relationship Management 11.2.25.0.000 (Access and security component) is affected by a HIGH-severity vulnerability (CVSS 8.7) exploitable by a low-privileged network attacker via HTTP, requiring user interaction, enabling unauthorized read/write access to critical data with s...

CVE-2026-70892

Affected product: Oracle Hyperion Data Relationship Management version 11.2.25.0.000, component "Access and security." Root cause: unspecified, described as "difficult to exploit." Impact: CVSS 8.2 (High) — low-privileged network attacker can gain unauthorized read/write access to critical data w...

CVE-2026-70879

Oracle Hyperion Data Relationship Management 11.2.25.0.000 is affected by a high-severity (CVSS 7.8) local vulnerability in its Access and security component. A low-privileged attacker with host logon can achieve full takeover with scope change, impacting additional products. No specific root cau...

CVE-2026-70885

Oracle Hyperion Data Relationship Management 11.2.25.0.000 has a HIGH-severity (CVSS 8.5) access and security flaw exploitable via HTTP by a low-privileged attacker, potentially causing product takeover and scope change. No exploit or patch details are provided; monitor Oracle's August 2026 CPU f...

CVE-2026-70902

Oracle Hyperion Data Relationship Management v11.2.25.0.000 has a HIGH-severity flaw (CVSS 7.1) in its Access and security component. A low-privileged local attacker can gain unauthorized creation, deletion, and modification access to all accessible data, with high confidentiality and integrity i...

CVE-2026-70903

Oracle Hyperion Data Relationship Management 11.2.25.0.000 (component: Access and security) has a HIGH-severity (CVSS 8.7) flaw exploitable by a low-privileged, network-attacker requiring only human interaction, enabling unauthorized creation, deletion, or modification of critical data with scope...

CVE-2026-70871

Oracle Hyperion Data Relationship Management version 11.2.25.0.000 has an unauthenticated, easily exploitable vulnerability in its Access and security component via TCP, allowing full product takeover with CVSS 9.8. Exploitation in the wild is not documented; Oracle's August 2026 security alert s...

CVE-2026-70891

Oracle's August 2026 Critical Patch Update fixes CVE-2026-70891, a HIGH (CVSS 7.5) flaw in the Access and security component of Hyperion Data Relationship Management 11.2.25.0.000. An unauthenticated, remote attacker can exploit it over HTTP to gain unauthorized read access to critical or all app...

CVE-2026-70870

Oracle Hyperion Data Relationship Management 11.2.23.0.000, Web Client - Unicode component, is vulnerable to unauthenticated HTTP attacks allowing full data access and partial DoS. CVSS 8.2 HIGH (C:H/A:L). Patch details are not provided; no exploitation reported. See Oracle CSP Aug 2026 advisory....

CVE-2026-70889

CVE-2026-70889 affects Oracle Hyperion Data Relationship Management v11.2.25.0.000, specifically the Access and security component. An unauthenticated remote attacker can exploit this via HTTP to gain unauthorized read access to all accessible data (CVSS 7.5, HIGH). Exploitation details are not p...

CVE-2026-70894

Oracle Hyperion Data Relationship Management 11.2.25.0.000, in the Access and security component, has an easily exploitable flaw allowing an unauthenticated local attacker with infrastructure access to compromise the application, resulting in unauthorized creation, deletion, modification, or full...

CVE-2026-70888

Oracle Hyperion Data Relationship Management (component: Access and security, version 11.2.25.0.000) has a flaw exploitable via HTTP by a high-privileged network attacker, potentially causing full product compromise (CVSS 6.6). No root cause, patch version, or in-the-wild exploitation details are...

CVE-2026-70878

CVE-2026-70878 affects Oracle Hyperion Data Relationship Management version 11.2.25.0.000 , specifically the Access and security component. A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve unauthorized creation, deletion, or modification of critical...