CVE-2026-70676
Received Received - Intake

Unauthenticated Data Access in Oracle Hyperion Calculation Manager

Publication date: 2026-08-18

Last updated on: 2026-08-18

Assigner: Oracle

Description
Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Calculation Manager. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Calculation Manager accessible data as well as unauthorized read access to a subset of Oracle Hyperion Calculation Manager accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hyperion Calculation Manager. CVSS 3.1 Base Score 7.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-18
Last Modified
2026-08-18
Generated
2026-08-19
AI Q&A
2026-08-19
EPSS Evaluated
N/A
NVD
CVE-2026-70676

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
oracle hyperion_calculation_manager 11.2.25.0.000

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a vulnerability in Oracle Hyperion Calculation Manager version 11.2.25.0.000. It allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized data creation, deletion, or modification, unauthorized data access, and partial denial of service.

Impact Analysis

If exploited, this vulnerability could allow attackers to access, modify, or delete sensitive data stored in Oracle Hyperion Calculation Manager. It may also disrupt system availability, causing partial outages. Organizations using this software should apply patches or mitigations promptly.

Compliance Impact

This vulnerability could lead to unauthorized access or modification of sensitive data, which may violate GDPR, HIPAA, or other regulations. Organizations must ensure proper safeguards are in place to protect data integrity and confidentiality to maintain compliance.

Mitigation Strategies

Apply the latest security patches from Oracle for Oracle Hyperion Calculation Manager version 11.2.25.0.000. Restrict network access to the HTTP interface of the affected component. Monitor for unauthorized data access or modifications and implement network segmentation to limit exposure.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-70676. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart