CVE-2019-10219

The CVE-2019-10219 entry affects Hibernate Validator: SafeHtml validator annotation fails to sanitize HTML comments/instructions, enabling XSS in affected code paths. Affected CP4S versions are 1.7.2.0, 1.8.0.0, and 1.8.1.0. Remediation is to upgrade to Cloud Pak for Security 1.9.0.0 per IBM guid...

CVE-2019-2899

CVE-2019-2899 affects Oracle JDeveloper and ADF (OAM component) in Oracle Fusion Middleware. Affected versions: 11.1.1.9.0, 11.1.2.4.0, 12.1.3.0.0, 12.2.1.3.0. The vulnerability is due to insufficient access control in OAM, allowing a high-privilege attacker with network access via HTTP to compro...

CVE-2021-2158

CVE-2021-2158 affects Oracle Hyperion Financial Management (HFM) with the Task Automation component, specifically version 11.1.2.4. Multiple sources (NVD, Red Hat, CNVD, CVE listings) describe a vulnerability that is exploitable by a high-privileged attacker with network access over HTTP, with us...

CVE-2020-2777

Oracle Hyperion Financial Management (HFM) 11.1.2.4 Security component is affected. The vulnerability allows a high-privilege attacker with network access via HTTP to compromise HFM, with exploitation requiring user interaction and potentially enabling unauthorized creation, deletion, or modifica...

CVE-2012-1714

CVE-2012-1714 affects Oracle Hyperion Financial Management (HFM) versions 11.1.1.4 and 11.1.2.1.104, via a vulnerability in the TList 6 ActiveX control. The issue permits remote code execution through unknown vectors; no concrete exploit details or impact vector are provided beyond this, and no r...

CVE-2026-70909

Oracle Hyperion Financial Management (component: Security), version 11.2.25.0.000 , has an easily exploitable flaw allowing an unauthenticated remote attacker to access all accessible data and cause partial denial of service. Oracle's August 2026 CPU advisory (cspuaug2026.html) provides the offic...

CVE-2026-71149

Oracle Hyperion Financial Management 11.2.25.0.000 Security component is affected: a low-privileged local attacker can, with human interaction, gain unauthorized data read/write access and partial DoS (CVSS 4.2 MEDIUM). Oracle's CSPR August 2026 advisory provides patch details.

CVE-2026-71147

Oracle Hyperion Financial Management version 11.2.25.0.000 is affected in its Security component. A difficult-to-exploit, unauthenticated HTTP-based attack requiring human interaction can yield unauthorized data modification (update/insert/delete) and partial denial of service. CVSS 3.1 score is ...

CVE-2026-70853

Oracle Hyperion Financial Management version 11.2.25.0.000 is affected in its Security component. A high-privileged attacker with network HTTP access can gain unauthorized read access to a subset of data and cause partial denial of service. CVSS 3.1 Base Score is 3.3 (LOW). No exploit code or in-...

CVE-2026-71091

Oracle Hyperion Financial Management 11.2.25.0.000 has an easily exploitable SQL-based vulnerability in the Security component, allowing a high-privileged remote attacker to achieve unauthorized read and write access to critical data (CVSS 6.5, Medium). No patch version or remediation is specifie...

CVE-2026-71103

Oracle Hyperion Financial Management 11.2.25.0.000 has an easily exploitable Security component flaw (CVSS 6.3, MEDIUM). A low-privileged, network-based attacker via HTTP can read partial data, modify some records, and cause partial DoS. CISA SSVC rates exploitation as none; no patch version is s...

CVE-2026-60682

Oracle Hyperion Financial Reporting (version 11.2.25.0.000), Repository component, is vulnerable to unauthenticated HTTP attacks allowing unauthorized read, update, insert, and delete access to data. CVSS 3.1 score 6.5 (Medium). Oracle's August 2026 CPU addresses the issue (https://www.oracle.com...

CVE-2026-70851

Oracle Hyperion Financial Management 11.2.25.0.000 has a Security component flaw exploitable over HTTP by a low-privileged attacker, causing partial denial of service (CVSS 3.1 base score 3.1, LOW). No exploit code or in-the-wild exploitation is documented; refer to Oracle's CSPUAugust2026 adviso...

CVE-2026-71060

CVE-2026-71060 affects Oracle Hyperion Financial Management 11.2.25.0.000 (Security component). A high-privileged remote attacker via HTTP can gain unauthorized access to critical data. CVSS 4.4 MEDIUM. Patch details are not provided in the available documents; consult Oracle's August 2026 CPU ad...

CVE-2026-71144

Oracle Hyperion Financial Management version 11.2.25.0.000 has a local Security component vulnerability exploitable only by a high-privileged attacker with infrastructure logon access. Successful exploitation allows unauthorized read and limited update/insert/delete access to accessible data; ava...

CVE-2026-71145

The Security component of Oracle Hyperion Financial Management 11.2.25.0.000 is affected by a network-based vulnerability exploitable by a low-privileged attacker requiring human interaction, yielding unauthorized read/write access to some application data (CVSS 4.4 MEDIUM). Oracle's August 2026 ...

CVE-2026-71148

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financia...

CVE-2026-70850

Oracle Hyperion Financial Management 11.2.25.0.000 Security component is affected by a LOW-severity local vulnerability (CVSS 3.0) requiring high privileges; a local attacker can modify data and cause partial DoS. No exploitation details are provided; monitor Oracle's August 2026 advisory for pat...

CVE-2026-71146

Oracle Hyperion Financial Management 11.2.25.0.000 Security component has a local DoS flaw (CVSS 1.9 LOW); high-privilege local attacker can cause partial service disruption. No exploitation observed; patch details not provided in documents.