CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

CISA KEV catalog updated: (v2026.08.20)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-70847
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A low-privileged attacker with local access can gain complete access to data, with impact on other products.

CVE-2026-70843
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A difficult-to-exploit flaw allows an unauthenticated attacker with access to the physical communication segment to compromise confidentiality and integrity. Successful attacks can result in unauthorized creation, deletion, or modification of data, as well as unauthorized access to data.

CVE-2026-70841
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A difficult-to-exploit flaw allows a low-privileged attacker with logon access to compromise data confidentiality. Attacks may impact additional products (scope change) and lead to unauthorized access to data.

CVE-2026-70838
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with logon access to compromise confidentiality and integrity. Attacks can result in unauthorized access to data and unauthorized modification of some data.

CVE-2026-70836
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with logon access to compromise data confidentiality. Attacks can result in unauthorized access to data.

CVE-2026-70831
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise data confidentiality. Attacks can result in unauthorized access to data.

CVE-2026-70826
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise data confidentiality. Attacks can result in unauthorized access to data.

CVE-2026-70825
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise data confidentiality. Attacks can result in unauthorized access to data.

CVE-2026-70824
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise data confidentiality. Attacks can result in unauthorized access to data.

CVE-2026-70794
Medium

Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. A difficult-to-exploit flaw allows a low-privileged attacker with logon access to compromise data integrity. Attacks can result in unauthorized creation, deletion, or modification of data.

CVE-2026-70793
Medium

Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to compromise confidentiality and integrity. Attacks can result in unauthorized modification of some data and unauthorized read access to a subset of data.

CVE-2026-70789
Medium

Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. Difficult to exploit, requires user interaction, allows unauthenticated attacker via HTTP to gain unauthorized access to critical data or full access to all data and modify some data.

CVE-2026-70788
Medium

Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. Easily exploitable, allows unauthenticated attacker via HTTP to perform unauthorized update, insert or delete of some data and read a subset of data.

CVE-2026-70784
Medium

Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. Difficult to exploit, requires logon to infrastructure, allows low privileged attacker to perform unauthorized creation, deletion or modification of critical data and read a subset of data.

CVE-2026-70780
Medium

Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. Difficult to exploit, requires physical access to network segment, allows unauthenticated attacker to perform unauthorized creation, deletion or modification of critical data and full access to data.

CVE-2026-70775
Medium

Vulnerability in Oracle Installed Base (component: User Interface) versions 12.2.3-12.2.15. Easily exploitable, allows low privileged attacker via HTTP to perform unauthorized update, read of some data and cause partial denial of service.

CVE-2026-70769
Medium

Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. Difficult to exploit, allows unauthenticated attacker via HTTP to gain unauthorized access to critical data or full access to all data and modify some data.

CVE-2026-70768
Medium

Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. Easily exploitable, requires user interaction, allows unauthenticated attacker via HTTP to perform unauthorized update of some data and read a subset of data, with potential impact on other products (scope change).

CVE-2026-70767
Medium

Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. Easily exploitable, allows low privileged attacker via HTTP to gain unauthorized access to critical data or full access to all data.

CVE-2026-70766
Medium

Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. Easily exploitable, requires user interaction, allows unauthenticated attacker via HTTP to perform unauthorized update of some data and read a subset of data.

PreviousPage 23 of 930Next

Vulnerability data from NVD (NIST) · CISA KEV · EPSS