Oracle Hyperion Infrastructure Technology vulnerabilities
68 known CVE vulnerabilities in Oracle Hyperion Infrastructure Technology, translated and rated.
- CVE-2026-70958Critical
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) allows an unauthenticated attacker with network access via HTTP to compromise the system, but requires user interaction. The attack may impact additional products (scope change).
- CVE-2026-62544Critical
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. An unauthenticated attacker can take over the system via HTTP, leading to full compromise of confidentiality, integrity, and availability.
- CVE-2026-62543Critical
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. An unauthenticated attacker can take over the system via HTTP, leading to full compromise of confidentiality, integrity, and availability.
- CVE-2026-62541Critical
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. An unauthenticated attacker can take over the system via HTTP, leading to full compromise of confidentiality, integrity, and availability.
- CVE-2026-62539Critical
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. An unauthenticated attacker can take over the system via HTTP, leading to full compromise of confidentiality, integrity, and availability.
- CVE-2026-62463Critical
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Lifecycle Management) version 11.2.25.0.000. A low-privileged attacker can gain unauthorized access to or modify critical data via HTTP, with impact potentially extending to other products (scope change).
- CVE-2026-62457Critical
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Common Events) version 11.2.25.0.000. An unauthenticated attacker can take over the system via HTTP, leading to full compromise of confidentiality, integrity, and availability.
- CVE-2026-70973High
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. A low-privileged attacker can take over the system via HTTP, but exploitation is difficult.
- CVE-2026-70972Medium
Vulnerability in Oracle Hyperion Infrastructure Technology, Installation and Configuration component. Affects version 11.2.25.0.000. Difficult to exploit, allows low-privileged attacker via HTTP to perform unauthorized creation, deletion or modification of critical data and unauthorized access to critical data or complete access to all product data.
- CVE-2026-70971High
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. A low-privileged attacker can gain unauthorized access to critical data and modify some data via HTTP.
- CVE-2026-70968Medium
Vulnerability in Oracle Hyperion Infrastructure Technology, Installation and Configuration component. Affects version 11.2.25.0.000. Easily exploitable, allows low-privileged attacker via HTTP to gain unauthorized access to critical data or complete access to all product data.
- CVE-2026-70967High
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. A low-privileged attacker with local access can compromise confidentiality and integrity, gaining unauthorized access to critical data or modifying it.
- CVE-2026-70966High
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. A low-privileged attacker with network access via HTTP can fully compromise the system.
- CVE-2026-70965High
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. A low-privileged attacker with network access via HTTP can fully compromise the system.
- CVE-2026-70964High
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. A low-privileged attacker with network access via HTTP can compromise confidentiality and integrity, and attacks may impact additional products (scope change).
- CVE-2026-70963Medium
Vulnerability in Oracle Hyperion Infrastructure Technology, Installation and Configuration component. Affects version 11.2.25.0.000. Difficult to exploit, allows low-privileged attacker via HTTP to perform unauthorized update, insert or delete access to some data and unauthorized read access to a subset of product data.
- CVE-2026-70962Low
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. A low-privileged attacker with local access can exploit this to gain unauthorized read access to a subset of data. CVSS 3.1: 3.3 (Confidentiality impact).
- CVE-2026-70961Medium
Vulnerability in Oracle Hyperion Infrastructure Technology, Installation and Configuration component. Affects version 11.2.25.0.000. Easily exploitable, requires user interaction, allows unauthenticated attacker via HTTP to perform unauthorized update, insert or delete access to some data and unauthorized read access to a subset of product data. May impact other products (scope change).
- CVE-2026-70959High
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. A low-privileged attacker with network access via HTTP can modify critical data and cause a complete denial of service (DOS).
- CVE-2026-70957High
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and modify it.
- CVE-2026-70956High
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. A low-privileged attacker with network access via HTTP can fully compromise the system.
- CVE-2026-62584Medium
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. An unauthenticated attacker with local access to the infrastructure can exploit it to gain unauthorized read access to a subset of data. Easily exploitable, CVSS 4.0.
- CVE-2026-62583Low
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. Difficult to exploit, requires logon to infrastructure and high privileges. Allows unauthorized update, insert, delete access and partial denial of service.
- CVE-2026-62581High
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration). Affected version is 11.2.25.0.000. Easily exploitable vulnerability allows a low-privileged attacker with logon to the infrastructure to compromise Oracle Hyperion Infrastructure Technology, potentially leading to takeover.
- CVE-2026-62579Medium
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. An unauthenticated attacker with network access via HTTP can gain unauthorized read access to a subset of data. Easily exploitable, CVSS 5.3.
- CVE-2026-62577Low
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. Easily exploitable, requires logon to infrastructure and low privileges. Allows unauthorized update, insert, delete access to data.
- CVE-2026-62576Medium
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. An unauthenticated attacker with network access via TLS can gain unauthorized access to critical data or complete access to all data, as well as unauthorized modification of some data. Difficult to exploit, CVSS 6.5.
- CVE-2026-62575Medium
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. A low-privileged attacker with local access can gain unauthorized access to critical data or complete access to all data. Difficult to exploit, CVSS 4.7.
- CVE-2026-62573Medium
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. A low-privileged attacker with local access can gain unauthorized access to critical data or complete access to all data. Easily exploitable, CVSS 5.5.
- CVE-2026-62572Medium
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. A low-privileged attacker with local access can gain unauthorized access to critical data or complete access to all data. Attacks may impact additional products (scope change). Easily exploitable, CVSS 6.5.
- CVE-2026-62570Low
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. Difficult to exploit, requires logon to infrastructure and high privileges. Allows unauthorized update, insert, delete access and partial denial of service.
- CVE-2026-62569Low
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. Easily exploitable, requires logon to infrastructure and high privileges. Allows unauthorized update, insert, delete access and partial denial of service.
- CVE-2026-62568Medium
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. An unauthenticated attacker with network access via HTTP can gain unauthorized modification of some data and read access to a subset of data. Requires user interaction and may impact additional products. Easily exploitable, CVSS 6.1.
- CVE-2026-62566Medium
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. An unauthenticated attacker with network access via HTTP can gain unauthorized read access to a subset of data. Easily exploitable, CVSS 5.3.
- CVE-2026-62564Medium
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. A low-privileged attacker with local access can gain unauthorized access to critical data or complete access to all data. Easily exploitable, CVSS 5.5.
- CVE-2026-62558Medium
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. Difficult to exploit flaw allows an unauthenticated attacker with local access, requiring user interaction, to unauthorized create, delete or modify data and gain full access to data.
- CVE-2026-62555Medium
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. Easily exploitable flaw allows a high privileged attacker with network access via SQL to unauthorized create, delete or modify data and gain full access to data.
- CVE-2026-62554High
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration). Affected version is 11.2.25.0.000. Easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology. Successful attacks can result in unauthorized access to critical data or complete access to all Oracle Hyperion Infrastructure Technology accessible data.
- CVE-2026-62553Medium
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. Easily exploitable flaw allows a low privileged attacker with local access to unauthorized access to critical data or complete access to all data.
- CVE-2026-62552High
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration). Affected version is 11.2.25.0.000. Easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology. Successful attacks can result in unauthorized access to critical data or complete access to all Oracle Hyperion Infrastructure Technology accessible data.
- CVE-2026-62551High
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. An unauthenticated attacker with network access via HTTP can partially compromise confidentiality, integrity, and availability of data.
- CVE-2026-62550High
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. An unauthenticated attacker with network access via HTTP can gain complete access to all data accessible by the system.
- CVE-2026-62545High
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. An unauthenticated attacker with physical access to the network segment can take over the system.
- CVE-2026-62538High
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. An unauthenticated attacker with network access via HTTPS can gain full access to data and modify it.
- CVE-2026-62537High
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. A low-privileged attacker with local access to the infrastructure can gain full access to data and modify it.
- CVE-2026-62536High
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. A low-privileged attacker with local access to the infrastructure can gain full access to data and modify it.
- CVE-2026-62535High
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. An unauthenticated attacker with network access via multiple protocols can gain full access to data, and attacks may impact additional products.
- CVE-2026-62531High
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Lifecycle Management) version 11.2.25.0.000. An unauthenticated attacker with network access via HTTP can take over the system.
- CVE-2026-62526Low
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Common Security) version 11.2.25.0.000. A difficult-to-exploit flaw allows a high-privileged attacker with network access via HTTP to compromise the system. Successful attacks can result in unauthorized update, insert, delete access and partial denial of service.
- CVE-2026-62523Medium
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Common Security) version 11.2.25.0.000. Easily exploitable flaw allows an unauthenticated attacker with network access via HTTP, requiring user interaction, to unauthorized access to critical data or complete access to all data.

