CVE-2021-45105

Summary of CVE-2021-45105 (Log4j2) : Affected Log4j 2.x versions 2.0-alpha1 through 2.16.0 (except 2.12.3 and 2.3.1) are vulnerable to denial of service via uncontrolled recursion triggered by self-referential lookups in Thread Context Map data. The root cause is improper handling of self-referen...

CVE-2026-70730

Oracle Hyperion Profitability and Cost Management 11.2.25.0.000 (Deployment component) is critically vulnerable (CVSS 9.1) to unauthenticated HTTP network attacks, enabling unauthorized creation, deletion, modification, and full read access to all accessible data. No exploit code is publicly docu...

CVE-2026-70738

Oracle Hyperion Profitability and Cost Management (component: Deployment) version 11.2.25.0.000 is vulnerable to an easily exploitable, low-privileged, network-based HTTP attack (CVSS 8.1) enabling unauthorized creation, deletion, modification, and full access to all accessible data. Oracle's Aug...

CVE-2026-70733

Oracle Hyperion Profitability and Cost Management version 11.2.25.0.000 is affected by a HIGH-severity (CVSS 7.1) vulnerability in its Deployment component. A low-privileged attacker with HTTP network access can read all accessible data and cause partial denial of service. Exploitation details ar...

CVE-2026-70721

Oracle Hyperion Profitability and Cost Management 11.2.25.0.000 (Deployment component) is affected by a HIGH-severity CVSS 8.6 unauthenticated HTTP-based vulnerability allowing unauthorized access to all product data with scope change; Oracle's CSPU Aug 2026 advisory is the primary reference. No ...

CVE-2026-70735

CVE-2026-70735 affects Oracle Hyperion Profitability and Cost Management version 11.2.25.0.000, specifically the Deployment component. A high-privileged attacker with network HTTP access can exploit this flaw to fully compromise the application (CVSS 7.2 HIGH, C/I/A impacts). No exploitation or i...

CVE-2026-70723

Oracle Hyperion Profitability and Cost Management version 11.2.25.0.000 (Deployment component) is vulnerable; a low-privileged attacker with HTTP network access can gain unauthorized access to critical data. Oracle's August 2026 security advisory provides the patch reference. No exploitation deta...

CVE-2026-70736

Oracle Hyperion Profitability and Cost Management version 11.2.25.0.000 has an easily exploitable flaw in its Deployment component. A low-privileged attacker with HTTP network access can gain unauthorized read access to all product data and limited write access (insert/update/delete). CVSS 3.1 sc...