Hyperion Infrastructure Technology vulnerabilities

41 known vulnerabilities in Hyperion Infrastructure Technology from Oracle. 41 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

41vulnerabilities

8critical

33high

0exploited

8.2average CVSS score

Latest first

7.5 High severity
Oracle Hyperion Infrastructure Technology: Missing Authentication for Critical Functionality
CVE-2026-70973Aug 18, 2026Oracle
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker wi
7.1 High severity
Oracle Hyperion Infrastructure Technology: Improper Access Control
CVE-2026-70971Aug 18, 2026Oracle
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with
7.1 High severity
Oracle Hyperion Infrastructure Technology: Improper Access Control
CVE-2026-70967Aug 18, 2026Oracle
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with
8.8 High severity
Oracle Hyperion Infrastructure Technology: Improper Access Control
CVE-2026-70966Aug 18, 2026Oracle
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with
8.8 High severity
Oracle Hyperion Infrastructure Technology: Improper Access Control
CVE-2026-70965Aug 18, 2026Oracle
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with
8.2 High severity
Oracle Hyperion Infrastructure Technology: Improper Access Control
CVE-2026-70964Aug 18, 2026Oracle
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker wi
8.1 High severity
Oracle Hyperion Infrastructure Technology: Improper Access Control
CVE-2026-70959Aug 18, 2026Oracle
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with
9.6 Critical severity
Oracle Hyperion Infrastructure Technology: URL Redirection to Untrusted Site
CVE-2026-70958Aug 18, 2026Oracle
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker wit
8.1 High severity
Oracle Hyperion Infrastructure Technology: Improper Access Control
CVE-2026-70957Aug 18, 2026Oracle
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with
8.8 High severity
Oracle Hyperion Infrastructure Technology: Missing Authentication for Critical Functionality
CVE-2026-70956Aug 18, 2026Oracle
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with
7.8 High severity
Oracle Hyperion Infrastructure Technology: Improper Access Control
CVE-2026-62581Aug 18, 2026Oracle
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with
7.5 High severity
Oracle Hyperion Infrastructure Technology: Improper Access Control
CVE-2026-62554Aug 18, 2026Oracle
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker wit
7.5 High severity
Oracle Hyperion Infrastructure Technology: Improper Access Control
CVE-2026-62552Aug 18, 2026Oracle
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker wit
7.3 High severity
Oracle Hyperion Infrastructure Technology: Improper Access Control
CVE-2026-62551Aug 18, 2026Oracle
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker wit
7.5 High severity
Oracle Hyperion Infrastructure Technology: Improper Access Control
CVE-2026-62550Aug 18, 2026Oracle
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker wit
7.5 High severity
Oracle Hyperion Infrastructure Technology: Improper Access Control
CVE-2026-62545Aug 18, 2026Oracle
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker w
9.8 Critical severity
Oracle Hyperion Infrastructure Technology: Improper Access Control
CVE-2026-62544Aug 18, 2026Oracle
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker wit
9.8 Critical severity
Oracle Hyperion Infrastructure Technology: Improper Access Control
CVE-2026-62543Aug 18, 2026Oracle
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker wit
9.8 Critical severity
Oracle Hyperion Infrastructure Technology: Improper Access Control
CVE-2026-62541Aug 18, 2026Oracle
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker wit
9.8 Critical severity
Oracle Hyperion Infrastructure Technology: Improper Access Control
CVE-2026-62539Aug 18, 2026Oracle
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker wit
7.4 High severity
Oracle Hyperion Infrastructure Technology: Improper Access Control
CVE-2026-62538Aug 18, 2026Oracle
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker w
7.1 High severity
Oracle Hyperion Infrastructure Technology: Improper Access Control
CVE-2026-62537Aug 18, 2026Oracle
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with
7.1 High severity
Oracle Hyperion Infrastructure Technology: Improper Access Control
CVE-2026-62536Aug 18, 2026Oracle
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with
8.6 High severity
Oracle Hyperion Infrastructure Technology: Improper Access Control
CVE-2026-62535Aug 18, 2026Oracle
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker wit
8.1 High severity
Oracle Hyperion Infrastructure Technology: Improper Access Control
CVE-2026-62531Aug 18, 2026Oracle
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Management). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with networ
7.1 High severity
Oracle Hyperion Infrastructure Technology: Improper Access Control
CVE-2026-62522Aug 18, 2026Oracle
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network acce
8.1 High severity
Oracle Hyperion Infrastructure Technology: Improper Access Control
CVE-2026-62502Aug 18, 2026Oracle
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access v
8.1 High severity
Oracle Hyperion Infrastructure Technology: Improper Access Control
CVE-2026-62501Aug 18, 2026Oracle
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network acces
8.8 High severity
Oracle Hyperion Infrastructure Technology: Improper Access Control
CVE-2026-62500Aug 18, 2026Oracle
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access v
7.4 High severity
Oracle Hyperion Infrastructure Technology: Improper Access Control
CVE-2026-62492Aug 18, 2026Oracle
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network acc
8.2 High severity
Oracle Hyperion Infrastructure Technology: Improper Access Control
CVE-2026-62485Aug 18, 2026Oracle
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access
7.5 High severity
Oracle Hyperion Infrastructure Technology: Improper Access Control
CVE-2026-62481Aug 18, 2026Oracle
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access
8.1 High severity
Oracle Hyperion Infrastructure Technology: Improper Access Control
CVE-2026-62477Aug 18, 2026Oracle
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access
8.1 High severity
Oracle Hyperion Infrastructure Technology: Improper Access Control
CVE-2026-62471Aug 18, 2026Oracle
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network acces
7.7 High severity
Oracle Hyperion Infrastructure Technology: Improper Access Control
CVE-2026-62467Aug 18, 2026Oracle
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access v
9.6 Critical severity
Oracle Hyperion Infrastructure Technology: Improper Access Control
CVE-2026-62463Aug 18, 2026Oracle
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Management). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network a
9.8 Critical severity
Oracle Hyperion Infrastructure Technology: Improper Access Control
CVE-2026-62457Aug 18, 2026Oracle
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access
7.5 High severity
Oracle Hyperion Infrastructure Technology: Exposure of Sensitive Information to an Unauthorized Actor
CVE-2026-60393Aug 18, 2026Oracle
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Management). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network
8.8 High severity
Apache Log4j 1.x: Deserialization of Untrusted Data
CVE-2022-23307Jan 18, 2022ApacheEPSS 54.4%
CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists.
9.8 Critical severity
Apache Log4j 1.x: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-23305Jan 18, 2022ApacheEPSS 66.5%
By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout. The message converter, %m, is likely to always be included. This allows attackers to manipulate