CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

CISA KEV catalog updated: (v2026.08.19)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-70916
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An unauthenticated attacker with local access to the infrastructure can gain unauthorized read access to a subset of data.

CVE-2026-70912
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A low-privileged attacker with local access, under difficult conditions and user interaction, can gain unauthorized creation, deletion, or modification of critical data, with impact on other products.

CVE-2026-70911
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An unauthenticated attacker over the network (HTTP) can gain unauthorized read access to a subset of data.

CVE-2026-70907
Medium

Vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (component: JSSE). An unauthenticated attacker over the network (TLS) can cause a partial denial of service (partial DoS).

CVE-2026-70895
Medium

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. A low-privileged attacker with local access can gain unauthorized access to critical data, with impact on other products.

CVE-2026-70888
Medium

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. A high-privileged attacker over the network (HTTP), under difficult conditions, can take over the system.

CVE-2026-70849
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A high-privileged attacker over the network (HTTP) can gain complete access to data and cause a complete denial of service (DoS).

CVE-2026-70847
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A low-privileged attacker with local access can gain complete access to data, with impact on other products.

CVE-2026-70843
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A difficult-to-exploit flaw allows an unauthenticated attacker with access to the physical communication segment to compromise confidentiality and integrity. Successful attacks can result in unauthorized creation, deletion, or modification of data, as well as unauthorized access to data.

CVE-2026-70841
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A difficult-to-exploit flaw allows a low-privileged attacker with logon access to compromise data confidentiality. Attacks may impact additional products (scope change) and lead to unauthorized access to data.

CVE-2026-70838
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with logon access to compromise confidentiality and integrity. Attacks can result in unauthorized access to data and unauthorized modification of some data.

CVE-2026-70836
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with logon access to compromise data confidentiality. Attacks can result in unauthorized access to data.

CVE-2026-70831
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise data confidentiality. Attacks can result in unauthorized access to data.

CVE-2026-70826
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise data confidentiality. Attacks can result in unauthorized access to data.

CVE-2026-70825
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise data confidentiality. Attacks can result in unauthorized access to data.

CVE-2026-70824
Medium

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise data confidentiality. Attacks can result in unauthorized access to data.

CVE-2026-70794
Medium

Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. A difficult-to-exploit flaw allows a low-privileged attacker with logon access to compromise data integrity. Attacks can result in unauthorized creation, deletion, or modification of data.

CVE-2026-70793
Medium

Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to compromise confidentiality and integrity. Attacks can result in unauthorized modification of some data and unauthorized read access to a subset of data.

CVE-2026-70789
Medium

Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. Difficult to exploit, requires user interaction, allows unauthenticated attacker via HTTP to gain unauthorized access to critical data or full access to all data and modify some data.

CVE-2026-70788
Medium

Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. Easily exploitable, allows unauthenticated attacker via HTTP to perform unauthorized update, insert or delete of some data and read a subset of data.

PreviousPage 20 of 927Next

Vulnerability data from NVD (NIST) · CISA KEV · EPSS