CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.11.09)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-62577
Low

Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. Easily exploitable, requires logon to infrastructure and low privileges. Allows unauthorized update, insert, delete access to data.

CVE-2026-62576
Medium

Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. An unauthenticated attacker with network access via TLS can gain unauthorized access to critical data or complete access to all data, as well as unauthorized modification of some data. Difficult to exploit, CVSS 6.5.

CVE-2026-62575
Medium

Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. A low-privileged attacker with local access can gain unauthorized access to critical data or complete access to all data. Difficult to exploit, CVSS 4.7.

CVE-2026-62573
Medium

Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. A low-privileged attacker with local access can gain unauthorized access to critical data or complete access to all data. Easily exploitable, CVSS 5.5.

CVE-2026-62572
Medium

Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. A low-privileged attacker with local access can gain unauthorized access to critical data or complete access to all data. Attacks may impact additional products (scope change). Easily exploitable, CVSS 6.5.

CVE-2026-62571
High

Vulnerability in Oracle Hyperion Calculation Manager (component: Security). Affected version is 11.2.25.0.000. Easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Hyperion Calculation Manager. Successful attacks can result in unauthorized access to critical data or complete access to all Oracle Hyperion Calculation Manager accessible data, with scope change.

CVE-2026-62570
Low

Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. Difficult to exploit, requires logon to infrastructure and high privileges. Allows unauthorized update, insert, delete access and partial denial of service.

CVE-2026-62569
Low

Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. Easily exploitable, requires logon to infrastructure and high privileges. Allows unauthorized update, insert, delete access and partial denial of service.

CVE-2026-62568
Medium

Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. An unauthenticated attacker with network access via HTTP can gain unauthorized modification of some data and read access to a subset of data. Requires user interaction and may impact additional products. Easily exploitable, CVSS 6.1.

CVE-2026-62566
Medium

Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. An unauthenticated attacker with network access via HTTP can gain unauthorized read access to a subset of data. Easily exploitable, CVSS 5.3.

CVE-2026-62564
Medium

Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. A low-privileged attacker with local access can gain unauthorized access to critical data or complete access to all data. Easily exploitable, CVSS 5.5.

CVE-2026-62558
Medium

Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. Difficult to exploit flaw allows an unauthenticated attacker with local access, requiring user interaction, to unauthorized create, delete or modify data and gain full access to data.

CVE-2026-62555
Medium

Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. Easily exploitable flaw allows a high privileged attacker with network access via SQL to unauthorized create, delete or modify data and gain full access to data.

CVE-2026-62554
High

Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration). Affected version is 11.2.25.0.000. Easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology. Successful attacks can result in unauthorized access to critical data or complete access to all Oracle Hyperion Infrastructure Technology accessible data.

CVE-2026-62553
Medium

Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. Easily exploitable flaw allows a low privileged attacker with local access to unauthorized access to critical data or complete access to all data.

CVE-2026-62552
High

Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration). Affected version is 11.2.25.0.000. Easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology. Successful attacks can result in unauthorized access to critical data or complete access to all Oracle Hyperion Infrastructure Technology accessible data.

CVE-2026-62551
High

Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. An unauthenticated attacker with network access via HTTP can partially compromise confidentiality, integrity, and availability of data.

CVE-2026-62550
High

Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. An unauthenticated attacker with network access via HTTP can gain complete access to all data accessible by the system.

CVE-2026-62545
High

Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. An unauthenticated attacker with physical access to the network segment can take over the system.

CVE-2026-62544
Critical

Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. An unauthenticated attacker can take over the system via HTTP, leading to full compromise of confidentiality, integrity, and availability.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS