CVE-2026-62554

Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 has an easily exploitable, unauthenticated HTTP-accessible vulnerability in its Installation and Configuration component, enabling unauthorized access to critical data (CVSS 7.5 HIGH). No patch or exploit details are provided; Oracle...

CVE-2026-62553

CVE-2026-62553 affects Oracle Hyperion Infrastructure Technology version 11.2.25.0.000, specifically the Installation and Configuration component. A low-privileged local attacker can exploit it to gain unauthorized access to critical or all accessible data (CVSS 5.5, confidentiality-only impact)....

CVE-2026-62551

CVE-2026-62551 affects Oracle Hyperion Infrastructure Technology (component: Installation and Configuration ), version 11.2.25.0.000 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to achieve unauthorized data modification, read access to a subset of data...

CVE-2026-62545

CVE-2026-62545 affects Oracle Hyperion Infrastructure Technology (component: Installation and Configuration), version 11.2.25.0.000 . An unauthenticated attacker with access to the physical communication segment attached to the hardware can exploit this vulnerability to achieve full system compro...

CVE-2026-62550

CVE-2026-62550 affects Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. An unauthenticated remote attacker can exploit this via HTTP to read critical data (CVSS 7.5, HIGH). No exploit details or patch version are provided; monitor Oracle...

CVE-2026-62543

Oracle Hyperion Infrastructure Technology (Installation and Configuration component, version 11.2.25.0.000) has a critical CVSS 9.8 flaw: unauthenticated remote attackers can exploit it over HTTP to fully compromise the product (C/I/A all High). No root-cause details are provided in the documents...

CVE-2026-62544

CVE-2026-62544 is a critical vulnerability (CVSS 9.8) in Oracle Hyperion Infrastructure Technology , specifically the Installation and Configuration component, affecting version 11.2.25.0.000 . An unauthenticated attacker with network access via HTTP can exploit this with low complexity to achiev...

CVE-2026-62541

Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 is affected in its Installation and Configuration component. An unauthenticated attacker with network access via HTTP can fully compromise the application (CVSS 9.8 Critical, C/H/I/H/A/H). No exploitation details or specific patch ve...

CVE-2026-62540

A HIGH-severity flaw in Oracle E-Business Suite's Cost Management Cost Planning component (versions 12.2.3–12.2.15) allows a high-privileged network attacker via HTTP to fully compromise the application. No public exploit details are provided; Oracle's August 2026 CPU advisory is the primary refe...

CVE-2026-62539

A critical unauthenticated remote vulnerability (CVSS 9.8) exists in Oracle Hyperion Infrastructure Technology's Installation and Configuration component (version 11.2.25.0.000). An attacker with HTTP network access can fully compromise the application, impacting confidentiality, integrity, and a...

CVE-2026-62537

Affected: Oracle Hyperion Infrastructure Technology 11.2.25.0.000, Installation and Configuration component. Impact: CVSS 7.1 — low-privileged local attacker can read/modify all accessible data. Exploitation status: not provided in documents. Remediation: apply Oracle CSP (August 2026 CPU) patche...

CVE-2026-62535

CVE-2026-62535 affects Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 (Installation and Configuration component). An unauthenticated remote attacker can exploit it via multiple protocols to gain unauthorized access to critical data, with scope change impacting additional products...

CVE-2026-62536

Oracle Hyperion Infrastructure Technology (component: Installation and Configuration), version 11.2.25.0.000, is affected by a HIGH-severity (CVSS 7.1) local privilege escalation flaw. A low-privileged local attacker can gain unauthorized read/write access to critical data across all accessible H...

CVE-2026-62538

Oracle's August 2026 Critical Patch Update fixes a HIGH (CVSS 7.4) vulnerability in the Installation and Configuration component of Hyperion Infrastructure Technology 11.2.25.0.000, allowing an unauthenticated network attacker to compromise confidentiality and integrity of all accessible data; or...

CVE-2026-62531

Oracle Hyperion Infrastructure Technology component Lifecycle Management (version 11.2.25.0.000) is affected by a HIGH-severity (CVSS 8.1) vulnerability exploitable by an unauthenticated attacker over HTTP, potentially resulting in full system takeover. No exploitation details are provided in the...

CVE-2026-62533

Oracle Hyperion Calculation Manager (component: Security) version 11.2.25.0.000 is affected by a low-severity (CVSS 3.7) unauthenticated, network-based vulnerability allowing limited unauthorized read access to application data. Oracle's August 2026 CPU advisory is the primary reference; no explo...

CVE-2026-62532

Oracle Hyperion Calculation Manager version 11.2.25.0.000 has a Security component flaw exploitable via SQL by a high-privileged network attacker, allowing unauthorized read and update/insert/delete access to a subset of application data (CVSS 3.8, LOW). No patch version or remediation details ar...

CVE-2026-62526

Oracle Hyperion Infrastructure Technology 11.2.25.0.000 has a low-severity flaw in its Common Security component. A high-privileged attacker with network HTTP access can perform unauthorized data updates/deletes and partial DoS. No exploitation or specific patch version is documented in the provi...

CVE-2026-62529

The Security component of Oracle Hyperion Calculation Manager (affected version 11.2.25.0.000) contains an easily exploitable flaw: a low-privileged attacker with network HTTP access can trigger unauthorized update, insert, or delete access to some application data, requiring human interaction fr...

CVE-2026-62523

The Common Security component of Oracle Hyperion Infrastructure Technology (version 11.2.25.0.000 ) contains an easily exploitable flaw: an unauthenticated attacker with network access via HTTP can compromise the product, requiring only human interaction, and gain unauthorized or complete access ...