THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-70938 (MEDIUM 6.5) — Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle

[NVD] CVE-2026-70938 (MEDIUM 6.5) — Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle

mednvdPublished 2026-08-18

CVE-2026-70938 CVSS: 6.5 MEDIUM Published: 2026-08-18T21:17:51.890

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks

Indicators of compromise

CVE-2026-70938cve
11.2.25.0ipv4

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-70938