CVE-2026-70719: Medium severity Oracle Hyperion Calculation Manager vulnerability
Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hyperion Calculation Manager executes to compromise Oracle Hyperion Calculation Manager. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hyperion Calculation Manager accessible data. CVSS 3.1 Base Score 4.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Oracle Hyperion Calculation Manager deployments running the supported affected version 11.2.25.0.000 are exposed if an attacker can log on to the infrastructure where Calculation Manager executes. The attack vector is local, so it is not described as remotely exploitable over the network.
Does exploitation require an Oracle Hyperion Calculation Manager account or user interaction?
No Calculation Manager privileges are required, and no user interaction is required. However, the attacker must be able to log on to the underlying infrastructure hosting Calculation Manager.
What is the impact of a successful attack?
A successful attack allows unauthorized read access to a subset of data accessible through Oracle Hyperion Calculation Manager. The stated impact is limited to confidentiality; integrity and availability impacts are not identified.