Oracle Hyperion Calculation Manager vulnerabilities
36 known CVE vulnerabilities in Oracle Hyperion Calculation Manager, translated and rated.
- CVE-2026-62582Critical
Vulnerability in Oracle Hyperion Calculation Manager (component: Security) version 11.2.25.0.000. A low-privileged attacker can compromise data confidentiality and integrity via HTTP, including unauthorized access or modification of critical data. Impact may extend to other products (scope change).
- CVE-2026-61206Critical
Vulnerability in Oracle Hyperion Calculation Manager (component: Security). Affected version is 11.2.25.0.000. Easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Hyperion Calculation Manager. Attacks may significantly impact additional products (scope change). CVSS 3.1 Base Score 9.9.
- CVE-2026-60858Critical
Vulnerability in Oracle Hyperion Calculation Manager (Security component) version 11.2.25.0.000. Easily exploitable by unauthenticated attacker with network access via HTTP, allowing takeover of the system. CVSS score 9.8.
- CVE-2026-70719Medium
Vulnerability in Oracle Hyperion Calculation Manager (component: Security) version 11.2.25.0.000. An unauthenticated attacker with local access can gain unauthorized read access to a subset of data. The attack is easy to exploit.
- CVE-2026-70714Medium
Vulnerability in Oracle Hyperion Calculation Manager (component: Security) version 11.2.25.0.000. Difficult to exploit, requires high privileged attacker with local access, allows unauthorized creation, deletion or modification of critical data.
- CVE-2026-70711Low
Vulnerability in Oracle Hyperion Calculation Manager (component: Security) version 11.2.25.0.000. Difficult to exploit, requires logon to infrastructure and user interaction. Allows unauthenticated attacker to unauthorized update, insert, delete and read access to some data.
- CVE-2026-70705High
Vulnerability in Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). Affects version 11.2.25.0.000. Easily exploitable, allows an unauthenticated attacker with logon to the infrastructure to gain unauthorized access to critical data, with potential impact on other products.
- CVE-2026-70685High
Vulnerability in Oracle Hyperion Calculation Manager (Security component) version 11.2.25.0.000. An unauthenticated attacker with logon to the infrastructure can compromise the system, with scope change affecting other products. Successful attacks can result in unauthorized access to critical data and unauthorized modification of some data. CVSS 7.9 (Confidentiality and Integrity impacts).
- CVE-2026-70683Medium
Vulnerability in Oracle Hyperion Calculation Manager (component: Security) version 11.2.25.0.000. Easily exploitable, allows unauthenticated attacker via HTTP, requires user interaction, to unauthorized update, insert or delete of some data.
- CVE-2026-70682Low
Vulnerability in Oracle Hyperion Calculation Manager (component: Security) version 11.2.25.0.000. Difficult to exploit, requires network access via HTTP. Allows unauthenticated attacker unauthorized read access to a subset of data.
- CVE-2026-70679Medium
Vulnerability in Oracle Hyperion Calculation Manager (component: Security) version 11.2.25.0.000. Easily exploitable, allows unauthenticated attacker via HTTP to unauthorized update, insert or delete of some data.
- CVE-2026-70678High
Vulnerability in Oracle Hyperion Calculation Manager (component: Security) affects version 11.2.25.0.000. It is easily exploitable by a low-privileged attacker, requires user interaction, and may impact additional products (scope change). Allows unauthorized access to critical data and modification of some data.
- CVE-2026-70677Medium
Vulnerability in Oracle Hyperion Calculation Manager (component: Security) version 11.2.25.0.000. Difficult to exploit, allows unauthenticated attacker via HTTP, requires user interaction, to unauthorized access to critical data and update, insert or delete of some data.
- CVE-2026-70676High
Vulnerability in Oracle Hyperion Calculation Manager (component: Security) affects version 11.2.25.0.000. It is difficult to exploit but allows an unauthenticated attacker via HTTP to perform unauthorized modification of critical data, partial data read, and partial denial of service.
- CVE-2026-62606Low
Vulnerability in Oracle Hyperion Calculation Manager (component: Security) version 11.2.25.0.000. Difficult to exploit, requires network access via HTTP and low privileges. Allows attacker unauthorized read access to a subset of data.
- CVE-2026-62604Low
Vulnerability in Oracle Hyperion Calculation Manager (component: Security) version 11.2.25.0.000. Difficult to exploit, requires physical access to communication segment. Allows unauthenticated attacker unauthorized read access to a subset of data.
- CVE-2026-62603Medium
Vulnerability in Oracle Hyperion Calculation Manager (component: Security) version 11.2.25.0.000. Easily exploitable, allows unauthenticated attacker with access to the physical communication segment to unauthorized update, insert or delete of some data and read access to a subset of data.
- CVE-2026-62602High
Vulnerability in Oracle Hyperion Calculation Manager (component: Security). Affects version 11.2.25.0.000. An unauthenticated attacker with physical access to the network segment can compromise confidentiality and integrity, impacting other products.
- CVE-2026-62598High
Vulnerability in Oracle Hyperion Calculation Manager (component: Security). Affects version 11.2.25.0.000. A low-privileged attacker can compromise confidentiality and integrity via SFTP, impacting other products.
- CVE-2026-62580Low
Vulnerability in Oracle Hyperion Calculation Manager (component: Security) version 11.2.25.0.000. Difficult to exploit, requires physical access to communication segment and low privileges. Allows unauthorized update, insert, delete access to data.
- CVE-2026-62578Medium
Vulnerability in Oracle Hyperion Calculation Manager (component: Security) version 11.2.25.0.000. An unauthenticated attacker with access to the physical communication segment can gain unauthorized access to critical data or complete access to all data. Easily exploitable, CVSS 6.5.
- CVE-2026-62571High
Vulnerability in Oracle Hyperion Calculation Manager (component: Security). Affected version is 11.2.25.0.000. Easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Hyperion Calculation Manager. Successful attacks can result in unauthorized access to critical data or complete access to all Oracle Hyperion Calculation Manager accessible data, with scope change.
- CVE-2026-62533Low
Vulnerability in Oracle Hyperion Calculation Manager (component: Security) version 11.2.25.0.000. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks can result in unauthorized read access to a subset of accessible data.
- CVE-2026-62532Low
Vulnerability in Oracle Hyperion Calculation Manager (component: Security) version 11.2.25.0.000. An easily exploitable flaw allows a high-privileged attacker with network access via SQL to compromise the system. Successful attacks can result in unauthorized update, insert, delete, and read access to some data.
- CVE-2026-62529Low
Vulnerability in Oracle Hyperion Calculation Manager (component: Security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the system, but requires user interaction. Successful attacks can result in unauthorized update, insert, or delete access to some data.
- CVE-2026-62461Low
Vulnerability in Oracle Hyperion Calculation Manager (component: Security) version 11.2.25.0.000. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to compromise the system, but requires user interaction. Successful attacks can result in unauthorized read access to a subset of data.
- CVE-2026-62460Medium
Vulnerability in Oracle Hyperion Calculation Manager (component: Security) version 11.2.25.0.000. Easily exploitable by a low-privileged attacker over HTTP, may impact other products (scope change) and allows unauthorized read access to a subset of data.
- CVE-2026-62459High
Vulnerability in Oracle Hyperion Calculation Manager (component: Security). Affects version 11.2.25.0.000. Difficult to exploit, requires high privileges and network access via HTTP. Can lead to unauthorized access to critical data, data modification, and partial denial of service.
- CVE-2026-62446Medium
Vulnerability in Oracle Hyperion Calculation Manager (component: Security) version 11.2.25.0.000. Easily exploitable by an unauthenticated attacker over HTTP, allowing unauthorized read access to a subset of data.
- CVE-2026-62441Medium
Vulnerability in Oracle Hyperion Calculation Manager (component: Security) version 11.2.25.0.000. Easily exploitable by a low-privileged attacker over HTTP, allowing unauthorized update/insert/delete and read access.
- CVE-2026-61342Medium
Vulnerability in Oracle Hyperion Calculation Manager (component: Security) version 11.2.25.0.000. Difficult to exploit by an unauthenticated attacker over HTTP, requires user interaction, allowing unauthorized access to critical data or complete access to all data.
- CVE-2026-61313Medium
Vulnerability in Oracle Hyperion Calculation Manager (component: Security) version 11.2.25.0.000. Easily exploitable by a high-privileged attacker with logon to the infrastructure, may impact other products (scope change) and allows unauthorized access to critical data and modification of data.
- CVE-2026-61293High
Vulnerability in Oracle Hyperion Calculation Manager (component: Security) affects version 11.2.25.0.000. Difficult to exploit, but an unauthenticated attacker can take over the system via HTTP.
- CVE-2026-61281High
Vulnerability in Oracle Hyperion Calculation Manager (component: Security) affects version 11.2.25.0.000. An unauthenticated attacker with network access via HTTP, requiring user interaction, can perform unauthorized modifications to critical data and gain full access to data. CVSS score is 8.1.
- CVE-2026-61276High
Vulnerability in Oracle Hyperion Calculation Manager (component: Security) affects version 11.2.25.0.000. A low-privileged attacker with network access via HTTP can fully compromise the system. CVSS score is 8.8.
- CVE-2026-61259High
Vulnerability in Oracle Hyperion Calculation Manager (component: Security). Affects version 11.2.25.0.000. Easily exploitable, allows low-privileged attacker to gain unauthorized access to critical data and cause partial denial of service.

