CVE-2026-70750

HighCVSS 7.8

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

5th percentile - higher than 5% of all known CVEs

Summary

Vulnerability in Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). Affects version 11.2.25.0.000. Easily exploitable by low-privileged attacker with logon to the infrastructure. Allows takeover of Oracle Hyperion Financial Reporting.

Risk Assessment

Risk includes full system takeover, potentially leading to breach of confidentiality, integrity, and availability of financial data.

Recommendation

Apply Oracle patches and restrict physical and logical access to the infrastructure.

Original NVD description (English source)

Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Reporting executes to compromise Oracle Hyperion Financial Reporting. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Reporting. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).