CVE-2026-62535

CVE-2026-62535 affects Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 (Installation and Configuration component). An unauthenticated remote attacker can exploit it via multiple protocols to gain unauthorized access to critical data, with scope change impacting additional products...

CVE-2026-62536

Oracle Hyperion Infrastructure Technology (component: Installation and Configuration), version 11.2.25.0.000, is affected by a HIGH-severity (CVSS 7.1) local privilege escalation flaw. A low-privileged local attacker can gain unauthorized read/write access to critical data across all accessible H...

CVE-2026-62538

Oracle's August 2026 Critical Patch Update fixes a HIGH (CVSS 7.4) vulnerability in the Installation and Configuration component of Hyperion Infrastructure Technology 11.2.25.0.000, allowing an unauthenticated network attacker to compromise confidentiality and integrity of all accessible data; or...

CVE-2026-62531

Oracle Hyperion Infrastructure Technology component Lifecycle Management (version 11.2.25.0.000) is affected by a HIGH-severity (CVSS 8.1) vulnerability exploitable by an unauthenticated attacker over HTTP, potentially resulting in full system takeover. No exploitation details are provided in the...

CVE-2026-62533

Oracle Hyperion Calculation Manager (component: Security) version 11.2.25.0.000 is affected by a low-severity (CVSS 3.7) unauthenticated, network-based vulnerability allowing limited unauthorized read access to application data. Oracle's August 2026 CPU advisory is the primary reference; no explo...

CVE-2026-62532

Oracle Hyperion Calculation Manager version 11.2.25.0.000 has a Security component flaw exploitable via SQL by a high-privileged network attacker, allowing unauthorized read and update/insert/delete access to a subset of application data (CVSS 3.8, LOW). No patch version or remediation details ar...

CVE-2026-62526

Oracle Hyperion Infrastructure Technology 11.2.25.0.000 has a low-severity flaw in its Common Security component. A high-privileged attacker with network HTTP access can perform unauthorized data updates/deletes and partial DoS. No exploitation or specific patch version is documented in the provi...

CVE-2026-62529

The Security component of Oracle Hyperion Calculation Manager (affected version 11.2.25.0.000) contains an easily exploitable flaw: a low-privileged attacker with network HTTP access can trigger unauthorized update, insert, or delete access to some application data, requiring human interaction fr...

CVE-2026-62523

The Common Security component of Oracle Hyperion Infrastructure Technology (version 11.2.25.0.000 ) contains an easily exploitable flaw: an unauthenticated attacker with network access via HTTP can compromise the product, requiring only human interaction, and gain unauthorized or complete access ...

CVE-2026-62522

A high-severity (CVSS 7.1) vulnerability exists in Oracle Hyperion Infrastructure Technology's Common Security component (affected version 11.2.25.0.000). A low-privileged attacker with network HTTP access can exploit it, with high attack complexity, to gain unauthorized access to critical data a...

CVE-2026-62520

CVE-2026-62520 affects Oracle Hyperion Infrastructure Technology (component: Common Events ), version 11.2.25.0.000 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized read and write (update/insert/delete) access to a subset of accessible...

CVE-2026-62511

CVE-2026-62511 affects Oracle Hyperion Infrastructure Technology 11.2.25.0.000 (Installation and Configuration component). It requires local access, high privileges, and high complexity, yielding CVSS 3.0 (LOW) with only low confidentiality and integrity impact. No exploit or detailed root cause ...

CVE-2026-62512

Oracle Siebel CRM Cloud Applications (component: Siebel Cloud Manager), versions 22.3 through 26.6, contain a critical (CVSS 9.9) flaw exploitable over HTTP by a low-privileged attacker, enabling full system compromise with scope change affecting additional products. No exploitation details are p...

CVE-2026-62510

Affected product: Oracle Hyperion Infrastructure Technology version 11.2.25.0.000. Root cause: unspecified flaw in the Installation and Configuration component. Impact: unauthenticated remote attacker can obtain limited read access to application data over HTTP (CVSS 5.3, MEDIUM). No patch versio...

CVE-2026-62509

Oracle Hyperion Infrastructure Technology (component: Common Events ), version 11.2.25.0.000 , is affected by an easily exploitable vulnerability that allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to a subset of accessible data. The impact is lim...

CVE-2026-62502

Oracle Hyperion Infrastructure Technology (component: Common Events, version 11.2.25.0.000) is vulnerable to a high-severity (CVSS 8.1) flaw exploitable via HTTP by a low-privileged attacker. Successful exploitation grants unauthorized creation, deletion, modification, and full read access to all...

CVE-2026-62506

Oracle Hyperion Infrastructure Technology 11.2.25.0.000 has an easily exploitable flaw in its Common Security component. A low-privileged attacker with network HTTP access can gain unauthorized read access to critical or all accessible data (CVSS 6.5, confidentiality only). No exploit details are...

CVE-2026-62501

Oracle Hyperion Infrastructure Technology (component: Common Events, version 11.2.25.0.000) is vulnerable to a high-complexity, unauthenticated HTTP attack that can result in full system takeover (CVSS 3.1 Base Score 8.1, HIGH). The attack requires network access and no authentication. Oracle's A...

CVE-2026-62499

Oracle Hyperion Infrastructure Technology (component: Common Security), version 11.2.25.0.000, has an easily exploitable vulnerability allowing unauthenticated remote HTTP attackers (requiring user interaction) to gain unauthorized read and write access to data, with scope-change impact. CVSS 3.1...

CVE-2026-62500

The Common Events component of Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 is vulnerable to a network-accessible flaw exploitable by a low-privileged attacker via HTTP, enabling full system takeover with CVSS 3.1 score 8.8 (HIGH). Oracle's August 2026 CPU advisory addresses th...