CVE-2026-70817

CriticalCVSS 9.8

Published: 18/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Summary

Vulnerability in Oracle Hyperion Financial Management product, component Security. Affected version is 11.2.25.0.000. An unauthenticated attacker can remotely compromise the system via HTTP.

Risk Assessment

Full takeover of the system by an unauthenticated attacker, potentially leading to complete compromise of data and services.

Recommendation

Apply Oracle patches immediately and restrict network access to the HTTP service.

Original NVD description (English source)

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).