CVE-2026-62551

CVE-2026-62551 affects Oracle Hyperion Infrastructure Technology (component: Installation and Configuration ), version 11.2.25.0.000 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to achieve unauthorized data modification, read access to a subset of data...

CVE-2026-62477

Oracle Hyperion Infrastructure Technology (component: Common Security), version 11.2.25.0.000, is vulnerable to a network-based attack by a low-privileged attacker, enabling unauthorized read/write access to all accessible data. CVSS 8.1 (High). Oracle's August 2026 security alert (cspuaug2026.ht...

CVE-2026-62522

A high-severity (CVSS 7.1) vulnerability exists in Oracle Hyperion Infrastructure Technology's Common Security component (affected version 11.2.25.0.000). A low-privileged attacker with network HTTP access can exploit it, with high attack complexity, to gain unauthorized access to critical data a...

CVE-2026-62535

CVE-2026-62535 affects Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 (Installation and Configuration component). An unauthenticated remote attacker can exploit it via multiple protocols to gain unauthorized access to critical data, with scope change impacting additional products...

CVE-2026-62545

CVE-2026-62545 affects Oracle Hyperion Infrastructure Technology (component: Installation and Configuration), version 11.2.25.0.000 . An unauthenticated attacker with access to the physical communication segment attached to the hardware can exploit this vulnerability to achieve full system compro...

CVE-2026-62550

CVE-2026-62550 affects Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. An unauthenticated remote attacker can exploit this via HTTP to read critical data (CVSS 7.5, HIGH). No exploit details or patch version are provided; monitor Oracle...

CVE-2026-70961

The affected product is Oracle Hyperion Infrastructure Technology, component Installation and Configuration, version 11.2.25.0.000. An unauthenticated remote attacker can exploit it via HTTP with low complexity, requiring human interaction, to gain unauthorized read and write access to accessible...

CVE-2026-70965

Oracle Hyperion Infrastructure Technology (component: Installation and Configuration , version 11.2.25.0.000 ) is affected by an easily exploitable vulnerability that allows a low-privileged attacker with network access via HTTP to achieve full takeover of the system, resulting in high impact to ...

CVE-2026-70972

Oracle Hyperion Infrastructure Technology component Installation and Configuration (version 11.2.25.0.000) is affected by a network-accessible vulnerability exploitable by low-privileged attackers via HTTP, enabling unauthorized data access and modification (CVSS 6.8, MEDIUM). No exploitation or ...

CVE-2026-70973

CVE-2026-70973 affects Oracle Hyperion Infrastructure Technology (component: Installation and Configuration), version 11.2.25.0.000 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve full takeover of the product, impacting confidentiality, integrity...

CVE-2026-62485

CVE-2026-62485 affects the Common Events component of Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability, though successful exploitation requires user interaction from a person other than the at...

CVE-2026-62531

Oracle Hyperion Infrastructure Technology component Lifecycle Management (version 11.2.25.0.000) is affected by a HIGH-severity (CVSS 8.1) vulnerability exploitable by an unauthenticated attacker over HTTP, potentially resulting in full system takeover. No exploitation details are provided in the...

CVE-2026-70971

Oracle Hyperion Infrastructure Technology 11.2.25.0.000 (Installation and Configuration component) has a network-reachable vulnerability allowing a low-privileged attacker to gain unauthorized access to critical data and modify some data. CVSS 7.1 (HIGH). No exploit details provided; remediation ...

CVE-2026-60393

Oracle Hyperion Infrastructure Technology 11.2.25.0.000 Lifecycle Management component has an unauthenticated, easily exploitable network-based vulnerability (CVSS 7.5) allowing full confidentiality compromise; Oracle's August 2026 CPU is referenced for remediation details not provided here.

CVE-2026-62471

Oracle Hyperion Infrastructure Technology 11.2.25.0.000 has a HIGH-severity (CVSS 8.1) flaw in its Common Events component. An unauthenticated remote attacker can exploit it via HTTP to fully compromise the application (confidentiality, integrity, availability). No exploitation details or patch v...

CVE-2026-62501

Oracle Hyperion Infrastructure Technology (component: Common Events, version 11.2.25.0.000) is vulnerable to a high-complexity, unauthenticated HTTP attack that can result in full system takeover (CVSS 3.1 Base Score 8.1, HIGH). The attack requires network access and no authentication. Oracle's A...

CVE-2026-62569

Oracle Hyperion Infrastructure Technology version 11.2.25.0.000, component Installation and Configuration, is affected by a locally exploitable vulnerability requiring high privileges, enabling unauthorized data modification and partial denial of service. CVSS 3.1 score is 3.4 (Low). Oracle's Aug...

CVE-2026-62579

Oracle Hyperion Infrastructure Technology (component: Installation and Configuration ) is affected in version 11.2.25.0.000 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability with low complexity to gain unauthorized read access to a subset of accessible data...

CVE-2026-62584

CVE-2026-62584 affects Oracle Hyperion Infrastructure Technology (component: Installation and Configuration ), version 11.2.25.0.000 . An unauthenticated attacker with local logon to the host infrastructure can exploit this vulnerability to gain unauthorized read access to a subset of accessible ...

CVE-2026-62463

This vulnerability affects Oracle Hyperion Infrastructure Technology (component: Lifecycle Management ), version 11.2.25.0.000 . A low-privileged attacker with network access via HTTP can exploit it to achieve unauthorized creation, deletion, or modification of critical data, as well as complete ...

CVE-2026-62502

Oracle Hyperion Infrastructure Technology (component: Common Events, version 11.2.25.0.000) is vulnerable to a high-severity (CVSS 8.1) flaw exploitable via HTTP by a low-privileged attacker. Successful exploitation grants unauthorized creation, deletion, modification, and full read access to all...

CVE-2026-62537

Affected: Oracle Hyperion Infrastructure Technology 11.2.25.0.000, Installation and Configuration component. Impact: CVSS 7.1 — low-privileged local attacker can read/modify all accessible data. Exploitation status: not provided in documents. Remediation: apply Oracle CSP (August 2026 CPU) patche...

CVE-2026-62538

Oracle's August 2026 Critical Patch Update fixes a HIGH (CVSS 7.4) vulnerability in the Installation and Configuration component of Hyperion Infrastructure Technology 11.2.25.0.000, allowing an unauthenticated network attacker to compromise confidentiality and integrity of all accessible data; or...

CVE-2026-62558

The Installation and Configuration component of Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 is affected. An unauthenticated attacker with local access to the hosting infrastructure can exploit this HIGH complexity vulnerability, which requires human interaction, to gain unauth...

CVE-2026-62566

CVE-2026-62566 affects Oracle Hyperion Infrastructure Technology version 11.2.25.0.000, in the Installation and Configuration component. An unauthenticated, network-accessible attacker can exploit it via HTTP to gain unauthorized read access to a subset of data, scoring CVSS 5.3 (Medium). Oracle'...

CVE-2026-62577

CVE-2026-62577 affects Oracle Hyperion Infrastructure Technology 11.2.25.0.000, specifically the Installation and Configuration component. A low-privileged local attacker can gain unauthorized update, insert, or delete access to some accessible data (CVSS 3.3 LOW). Patch details are not provided ...

CVE-2026-62583

The vulnerability affects Oracle Hyperion Infrastructure Technology version 11.2.25.0.000, specifically the Installation and Configuration component. CVSS 3.1 scores it LOW (3.0) requiring high privileges and local access; successful exploitation permits unauthorized data modification and partial...

CVE-2026-62509

Oracle Hyperion Infrastructure Technology (component: Common Events ), version 11.2.25.0.000 , is affected by an easily exploitable vulnerability that allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to a subset of accessible data. The impact is lim...

CVE-2026-62536

Oracle Hyperion Infrastructure Technology (component: Installation and Configuration), version 11.2.25.0.000, is affected by a HIGH-severity (CVSS 7.1) local privilege escalation flaw. A low-privileged local attacker can gain unauthorized read/write access to critical data across all accessible H...

CVE-2026-62555

The affected product is Oracle Hyperion Infrastructure Technology 11.2.25.0.000 (Installation and Configuration component). A high-privileged attacker with network SQL access can achieve unauthorized creation, deletion, or modification of all accessible data, with CVSS 3.1 base score 6.5 (Medium)...

CVE-2026-70964

Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 has a HIGH-severity (CVSS 8.2) vulnerability in the Installation and Configuration component, allowing a low-privileged network attacker to compromise the system with unauthorized data access, creation, deletion, or modification acro...

CVE-2026-62499

Oracle Hyperion Infrastructure Technology (component: Common Security), version 11.2.25.0.000, has an easily exploitable vulnerability allowing unauthenticated remote HTTP attackers (requiring user interaction) to gain unauthorized read and write access to data, with scope-change impact. CVSS 3.1...

CVE-2026-62520

CVE-2026-62520 affects Oracle Hyperion Infrastructure Technology (component: Common Events ), version 11.2.25.0.000 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized read and write (update/insert/delete) access to a subset of accessible...

CVE-2026-62572

Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 has an easily exploitable local vulnerability in its Installation and Configuration component, allowing a low-privileged attacker to gain unauthorized access to critical data with scope change affecting additional products. Oracle's ...

CVE-2026-62576

Oracle Hyperion Infrastructure Technology version 11.2.25.0.000, specifically its Installation and Configuration component, is vulnerable to a network-based, unauthenticated attack via TLS that can compromise confidentiality and integrity of accessible data. CVSS 3.1 scores 6.5 (Medium). No in-th...

CVE-2026-70957

Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) at version 11.2.25.0.000 has a HIGH-severity (CVSS 8.1) flaw: a low-privileged network attacker via HTTP can gain unauthorized read/write access to critical application data. No exploit or patch details are prov...

CVE-2026-62467

Oracle Hyperion Infrastructure Technology 11.2.25.0.000, component "Common Events," is affected by a HIGH-severity flaw (CVSS 7.7, S:C/C:H/I:N/A:N). A low-privileged network attacker via HTTP can gain unauthorized access to critical data, with scope change potentially impacting additional product...

CVE-2026-62553

CVE-2026-62553 affects Oracle Hyperion Infrastructure Technology version 11.2.25.0.000, specifically the Installation and Configuration component. A low-privileged local attacker can exploit it to gain unauthorized access to critical or all accessible data (CVSS 5.5, confidentiality-only impact)....

CVE-2026-62564

A local low-privileged attacker can exploit a flaw in the Installation and Configuration component of Oracle Hyperion Infrastructure Technology (affected version 11.2.25.0.000) to gain unauthorized access to all accessible data; CVSS 3.1 score 5.5 (MEDIUM), with high confidentiality impact only. ...

CVE-2026-62570

Oracle Hyperion Infrastructure Technology 11.2.25.0.000 has a local, low-severity (CVSS 3.0) flaw in its Installation and Configuration component; a high-privileged attacker with system access can achieve limited data modification and partial denial of service. No exploitation details are provide...

CVE-2026-62506

Oracle Hyperion Infrastructure Technology 11.2.25.0.000 has an easily exploitable flaw in its Common Security component. A low-privileged attacker with network HTTP access can gain unauthorized read access to critical or all accessible data (CVSS 6.5, confidentiality only). No exploit details are...

CVE-2026-62573

Oracle Hyperion Infrastructure Technology component "Installation and Configuration" (version 11.2.25.0.000) has a local, low-complexity vulnerability exploitable by a low-privileged attacker with host logon access, causing unauthorized access to all accessible data (CVSS 5.5, MEDIUM). No root ca...

CVE-2026-70959

Oracle Hyperion Infrastructure Technology (version 11.2.25.0.000), component Installation and Configuration, is vulnerable to a network-based attack allowing low-privileged attackers to modify/delete data and cause denial of service. CVSS 3.1 score 8.1 (HIGH). Details: https://www.oracle.com/secu...

CVE-2026-70962

Oracle Hyperion Infrastructure Technology 11.2.25.0.000, in its Installation and Configuration component, has a low-severity local vulnerability (CVSS 3.3) exploitable by a low-privileged attacker with local access, allowing unauthorized read access to a subset of application data. Oracle's Augus...

CVE-2026-62526

Oracle Hyperion Infrastructure Technology 11.2.25.0.000 has a low-severity flaw in its Common Security component. A high-privileged attacker with network HTTP access can perform unauthorized data updates/deletes and partial DoS. No exploitation or specific patch version is documented in the provi...

CVE-2026-62575

Oracle Hyperion Infrastructure Technology (version 11.2.25.0.000, Installation and Configuration component) has a local, high-complexity flaw exploitable by a low-privileged attacker with infrastructure access, enabling unauthorized full data access. Impact is confidentiality-only (CVSS 4.7 Mediu...

CVE-2026-70963

Oracle Hyperion Infrastructure Technology (version 11.2.25.0.000, Installation and Configuration component) is vulnerable to a network-accessible attack requiring low privileges. A successful exploit yields unauthorized read and write access to a subset of data. CVSS 4.2 (Medium) reflects high at...

CVE-2026-70967

CVE-2026-70967 affects Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 (Installation and Configuration component). A low-privileged local attacker can compromise the product, gaining unauthorized read/write access to all accessible data. CVSS 3.1 score is 7.1 (High). Oracle's Augu...

CVE-2026-62543

Oracle Hyperion Infrastructure Technology (Installation and Configuration component, version 11.2.25.0.000) has a critical CVSS 9.8 flaw: unauthenticated remote attackers can exploit it over HTTP to fully compromise the product (C/I/A all High). No root-cause details are provided in the documents...

CVE-2026-62523

The Common Security component of Oracle Hyperion Infrastructure Technology (version 11.2.25.0.000 ) contains an easily exploitable flaw: an unauthenticated attacker with network access via HTTP can compromise the product, requiring only human interaction, and gain unauthorized or complete access ...