CVE-2026-70741
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk33th percentile - higher than 33% of all known CVEs
Summary
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. Easily exploitable by an unauthenticated attacker over RMI, allowing unauthorized data access and modification. CVSS score 9.1.
Risk Assessment
An attacker can gain unauthorized access to critical data and modify it, threatening integrity and confidentiality of financial information.
Recommendation
Apply Oracle patches and restrict RMI access to trusted hosts.
Other vulnerabilities in Oracle Hyperion Financial Reporting
See all- CVE-2026-70745Critical
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. Easily exploitable by an unauthenticated attacker over HTTP, allowing takeover of the system. CVSS score 9.8.
- CVE-2026-70740Critical
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. Easily exploitable by an unauthenticated attacker over HTTP, allowing takeover of the system. CVSS score 9.8.
- CVE-2026-70739Critical
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. Easily exploitable by an unauthenticated attacker over HTTP, allowing takeover of the system. CVSS score 9.8.
- CVE-2026-70794Medium
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. A difficult-to-exploit flaw allows a low-privileged attacker with logon access to compromise data integrity. Attacks can result in unauthorized creation, deletion, or modification of data.
- CVE-2026-70793Medium
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to compromise confidentiality and integrity. Attacks can result in unauthorized modification of some data and unauthorized read access to a subset of data.
- CVE-2026-70789Medium
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. Difficult to exploit, requires user interaction, allows unauthenticated attacker via HTTP to gain unauthorized access to critical data or full access to all data and modify some data.
- CVE-2026-70788Medium
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. Easily exploitable, allows unauthenticated attacker via HTTP to perform unauthorized update, insert or delete of some data and read a subset of data.
- CVE-2026-70787High
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. A low-privileged attacker can compromise the system via HTTP. Easily exploitable, CVSS 8.8.
- CVE-2026-70785Low
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. An unauthenticated attacker with network access via HTTP can exploit this to gain unauthorized read access to a subset of data. CVSS 3.1: 3.7 (Confidentiality impact).
- CVE-2026-70784Medium
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. Difficult to exploit, requires logon to infrastructure, allows low privileged attacker to perform unauthorized creation, deletion or modification of critical data and read a subset of data.
Original NVD description (English source)
Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via RMI to compromise Oracle Hyperion Financial Reporting. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Reporting accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Financial Reporting accessible data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS