Oracle Hyperion Infrastructure Technology vulnerabilities

CVE-2026-70958 [CRITICAL] CWE-601 CVE-2026-70958: Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology. Succes

CVE-2026-62535 [HIGH] CWE-284 CVE-2026-62535: Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Hyperion Infrastructure Technolo

CVE-2026-62531 [HIGH] CWE-284 CVE-2026-62531: Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Management). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology. Successful attacks

CVE-2026-62501 [HIGH] CWE-284 CVE-2026-62501: Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology. Successful attacks of thi

CVE-2019-17563 [HIGH] CWE-384 CVE-2019-17563: When using FORM authentication with Apache Tomcat 9.0.0.M1 to 9.0.29, 8.5.0 to 8.5.49 and 7.0.0 to 7 When using FORM authentication with Apache Tomcat 9.0.0.M1 to 9.0.29, 8.5.0 to 8.5.49 and 7.0.0 to 7.0.98 there was a narrow window where an attacker could perform a session fixation attack. The window was considered too narrow for an exploit to be practical but, erring on the side of caution, this issue has been treated as a security vulnerability.

CVE-2026-62477 [HIGH] CWE-284 CVE-2026-62477: Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology. Successful attacks of this

CVE-2026-62502 [HIGH] CWE-284 CVE-2026-62502: Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology. Successful attacks of this v

CVE-2026-70957 [HIGH] CWE-284 CVE-2026-70957: Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology. Successful

CVE-2026-62471 [HIGH] CWE-284 CVE-2026-62471: Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology. Successful attacks of thi

CVE-2019-12402 [HIGH] CWE-835 CVE-2019-12402: The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get int The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This can lead to a denial of service attack if an attacker can choose the file names inside of an archive created by Compress.

CVE-2026-70964 [HIGH] CWE-284 CVE-2026-70964: Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology. While the

CVE-2026-60393 [HIGH] CWE-200 CVE-2026-60393: Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Management). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology. Successful attacks o

CVE-2026-62550 [HIGH] CWE-284 CVE-2026-62550: Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology. Successful

CVE-2026-62554 [HIGH] CWE-284 CVE-2026-62554: Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology. Successful

CVE-2026-62552 [HIGH] CWE-284 CVE-2026-62552: Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology. Successful

CVE-2026-70973 [HIGH] CWE-306 CVE-2026-70973: Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology. Successfu

CVE-2026-62481 [HIGH] CWE-284 CVE-2026-62481: Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via SQL to compromise Oracle Hyperion Infrastructure Technology. Successful attacks of this

CVE-2026-62538 [HIGH] CWE-284 CVE-2026-62538: Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Hyperion Infrastructure Technology. Success

CVE-2026-62492 [HIGH] CWE-284 CVE-2026-62492: Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Hyperion Infrastructure Technology. Successful attacks of

CVE-2026-70959 [HIGH] CWE-284 CVE-2026-70959: Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology. Successful