CVE-2026-70943 Oracle Corporation CVE debrief

Who should care

Organizations using Oracle Hyperion Financial Management version 11.2.25.0.000 should review and apply security patches. IT teams responsible for Oracle Hyperion Financial Management should restrict access to physical communication segments attached to hardware where Oracle Hyperion Financial Management executes and monitor for unauthorized access.

Technical summary

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data.

Defensive priority

High priority due to high CVSS score of 8.1 and potential for unauthorized creation, deletion or modification access to critical data.

Recommended defensive actions

• Review and apply Oracle security patches for affected versions
• Restrict access to physical communication segments attached to hardware where Oracle Hyperion Financial Management executes
• Monitor for unauthorized creation, deletion or modification access to critical data
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.

Evidence notes

Evidence from official sources indicates a vulnerability in Oracle Hyperion Financial Management product. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management.

Official resources