# CVE-2026-70714: Oracle Hyperion Calculation Manager integrity bypass in security component

Source: https://junglewise.ai/threats/cve-2026-70714-oracle-hyperion-calculation-manager-integrity-bypass-in-security  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-08-18. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2026-70714 · Severity: medium · CVSS 4.1 · Published 2026-08-18

Oracle Hyperion Calculation Manager is a financial planning and analysis tool used to manage complex calculations across enterprise systems. A local vulnerability allows an attacker with administrative access and logon capability to modify or delete critical financial data without authorization, potentially compromising data integrity across the organization's planning and reporting processes.

Technologies: [Oracle Hyperion Calculation Manager](https://junglewise.ai/threats/technologies/hyperion-calculation-manager). Vendors: [Oracle](https://junglewise.ai/threats/vendors/oracle).

## Quick answers

**Is CVE-2026-70714 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-70714 being exploited in the wild.

**How severe is CVE-2026-70714?** Medium severity, with a CVSS score of 4.1, published 18 August 2026.

**Which products and versions are affected?** Oracle Hyperion Calculation Manager 11.2.25.0.000.

**Is there a fix for CVE-2026-70714?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-70714 attacked?** It is attacked with local access.

**Am I affected by CVE-2026-70714?** Check whether you run Oracle Hyperion Calculation Manager at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

This is an integrity-based vulnerability in the security component of Oracle Hyperion Calculation Manager version 11.2.25.0.000. The vulnerability requires local access (AV:L) and high privileges (PR:H), with a high complexity bar (AC:H) making it difficult to exploit. An authenticated high-privileged attacker with logon access to the infrastructure can bypass security controls to create, delete, or modify critical data within the application. No patch status is indicated in the advisory; users should consult Oracle's security updates for remediation.

## Affected products

- Oracle Hyperion Calculation Manager 11.2.25.0.000

## Timeline

- 2026-08-18: disclosed

## References

- [https://www.oracle.com/security-alerts/cspuaug2026.html](https://www.oracle.com/security-alerts/cspuaug2026.html)

## Related threats

- [Oracle Hyperion Calculation Manager local information disclosure in security component](https://junglewise.ai/threats/cve-2026-70719-oracle-hyperion-calculation-manager-local-information-disclosure)
- [Oracle Hyperion Calculation Manager privilege escalation in Security component](https://junglewise.ai/threats/cve-2026-70711-oracle-hyperion-calculation-manager-privilege-escalation-in)
- [Oracle Hyperion Calculation Manager privilege escalation in Security](https://junglewise.ai/threats/cve-2026-70705-oracle-hyperion-calculation-manager-privilege-escalation-in)
- [Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The…](https://junglewise.ai/threats/cve-2026-70685-vulnerability-in-the-oracle-hyperion-calculation-manager-product)
- [Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The…](https://junglewise.ai/threats/cve-2026-70683-vulnerability-in-the-oracle-hyperion-calculation-manager-product)