CVE-2019-10219

The CVE-2019-10219 entry affects Hibernate Validator: SafeHtml validator annotation fails to sanitize HTML comments/instructions, enabling XSS in affected code paths. Affected CP4S versions are 1.7.2.0, 1.8.0.0, and 1.8.1.0. Remediation is to upgrade to Cloud Pak for Security 1.9.0.0 per IBM guid...

CVE-2019-2899

CVE-2019-2899 affects Oracle JDeveloper and ADF (OAM component) in Oracle Fusion Middleware. Affected versions: 11.1.1.9.0, 11.1.2.4.0, 12.1.3.0.0, 12.2.1.3.0. The vulnerability is due to insufficient access control in OAM, allowing a high-privilege attacker with network access via HTTP to compro...

CVE-2026-70944

Oracle's August 2026 Critical Patch Update (CSPRAUG2026) addresses CVE-2026-70944, a high-severity flaw in the Security component of Hyperion Financial Management 11.2.25.0.000, exploitable over TCP by a low-privileged attacker to achieve full product compromise (CVSS 8.8). Apply the August 2026 ...

CVE-2026-70952

Oracle Hyperion Financial Management version 11.2.25.0.000 is affected by a HIGH-severity (CVSS 3.1 base score 8.2) vulnerability in its Security component. An unauthenticated attacker with network access via HTTP can exploit it to gain unauthorized access to critical or all product data and caus...

CVE-2021-2158

CVE-2021-2158 affects Oracle Hyperion Financial Management (HFM) with the Task Automation component, specifically version 11.1.2.4. Multiple sources (NVD, Red Hat, CNVD, CVE listings) describe a vulnerability that is exploitable by a high-privileged attacker with network access over HTTP, with us...

CVE-2026-70935

Oracle Hyperion Financial Management 11.2.25.0.000 has a Security-component flaw: a low-privileged attacker with network HTTP access can read all accessible data (HIGH confidentiality) and cause partial DoS (LOW availability), CVSS 7.1. No patch version or exploit details are provided; see Oracle...

CVE-2012-1714

CVE-2012-1714 affects Oracle Hyperion Financial Management (HFM) versions 11.1.1.4 and 11.1.2.1.104, via a vulnerability in the TList 6 ActiveX control. The issue permits remote code execution through unknown vectors; no concrete exploit details or impact vector are provided beyond this, and no r...

CVE-2020-2777

Oracle Hyperion Financial Management (HFM) 11.1.2.4 Security component is affected. The vulnerability allows a high-privilege attacker with network access via HTTP to compromise HFM, with exploitation requiring user interaction and potentially enabling unauthorized creation, deletion, or modifica...

CVE-2026-70831

Oracle HFM 11.2.25.0.000 has an easily exploitable HTTP-based security flaw. A low-privileged, network-attached attacker can gain unauthorized access to critical or all accessible HFM data (CVSS 6.5, Confidentiality: HIGH). Oracle's August 2026 CPU advisory (https://www.oracle.com/security-alerts...

CVE-2026-70933

Oracle Hyperion Financial Management 11.2.25.0.000 Security component is vulnerable; a low-privileged network attacker can access all accessible data and cause partial DoS via HTTP. CVSS 7.1 (HIGH). No exploit or in-the-wild exploitation details provided. Patch status not specified in documents.

CVE-2026-70842

Oracle Hyperion Financial Management v11.2.25.0.000 (Security component) is affected by an easily exploitable local vulnerability (CVSS 8.4 HIGH). A low-privileged attacker with infrastructure access can compromise the product, achieving unauthorized read/write access to all accessible data, with...

CVE-2026-70921

Oracle Hyperion Financial Management 11.2.25.0.000 has a critical Security-component flaw (CVSS 10.0) exploitable by unauthenticated, network-adjacent attackers via TLS, granting unauthorized read/write access to all HFM data; scope change may affect additional Oracle products. Oracle's August 20...

CVE-2026-87238

Oracle Hyperion Financial Management (component: Security ), version 11.2.26.0.000 , is affected by an easily exploitable vulnerability that allows a low-privileged attacker with network access via SQL to compromise the product. Successful exploitation can result in full takeover of the applicati...

CVE-2026-70823

CVE-2026-70823 affects the Security component of Oracle Hyperion Financial Management version 11.2.25.0.000 . An unauthenticated attacker with network access via HTTPS can exploit this vulnerability, though it is rated as difficult to exploit (high attack complexity). Successful exploitation allo...

CVE-2026-87186

Oracle Hyperion Financial Management (component: Security ) in supported version 11.2.26.0.000 is affected by a critical vulnerability (CVSS 3.1: 9.6 ). An unauthenticated attacker with access to the physical communication segment (adjacent network) can exploit this with low complexity and no use...

CVE-2026-70925

Oracle Hyperion Financial Management (component: Security ), version 11.2.25.0.000 , is affected by an easily exploitable vulnerability that allows a low-privileged attacker with network access via SQL to compromise the product. Successful exploitation results in unauthorized creation, deletion, ...

CVE-2026-71121

Oracle Hyperion Financial Management 11.2.25.0.000 has an easily exploitable security component flaw (CVSS 6.5 MEDIUM) allowing unauthenticated remote attackers via HTTP to modify data and cause partial denial of service. Oracle's August 2026 security alert provides patch details. Exploitation de...

CVE-2026-87174

Oracle Hyperion Financial Management (component: Security ), version 11.2.26.0.000 , is vulnerable to an unauthenticated attack over TCP that allows compromise of the product. Successful exploitation can result in high impact to confidentiality (unauthorized access to critical or all accessible d...

CVE-2026-70828

Oracle Hyperion Financial Management 11.2.25.0.000 Security component is vulnerable to a HIGH-severity (CVSS 7.7) flaw exploitable over HTTP by a low-privileged attacker, allowing unauthorized access to critical data with scope change affecting other products. No in-the-wild exploitation details ...

CVE-2026-70911

Oracle's August 2026 Critical Patch Update (CSPAug2026) addresses CVE-2026-70911, a medium-severity (CVSS 5.3) Security component flaw in Hyperion Financial Management 11.2.25.0.000 that allows unauthenticated remote attackers to read a subset of accessible data via HTTP; apply Oracle's August 20...

CVE-2026-70928

The Security component of Oracle Hyperion Financial Management (version 11.2.25.0.000) is vulnerable to SQL-based attacks by low-privileged network attackers, enabling full system compromise (CVSS 8.8, HIGH). No exploitation details are provided. Patch status is not specified in the available doc...

CVE-2026-71117

Oracle Hyperion Financial Management version 11.2.25.0.000 contains a Security-component flaw (CVSS 7.5, HIGH) exploitable by a high-privileged local attacker to fully compromise the application and potentially other products. Oracle's August 2026 CPU advisory is the remediation reference. No exp...

CVE-2026-70909

Oracle Hyperion Financial Management (component: Security), version 11.2.25.0.000 , has an easily exploitable flaw allowing an unauthenticated remote attacker to access all accessible data and cause partial denial of service. Oracle's August 2026 CPU advisory (cspuaug2026.html) provides the offic...

CVE-2026-70946

Oracle Hyperion Financial Management 11.2.25.0.000 has a Security component flaw; a low-privileged remote attacker can exploit it over HTTP to fully compromise the application (CVSS 7.5, HIGH). Oracle's August 2026 CPU advisory addresses this issue.

CVE-2026-87185

Oracle Hyperion Financial Management (component: Security ), version 11.2.26.0.000 , is affected by an easily exploitable vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the application. Successful exploitation results in full takeover of Oracle Hype...

CVE-2026-87221

Oracle Hyperion Financial Management (component: Security ), version 11.2.26.0.000 , is affected by an easily exploitable vulnerability that allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical or all accessible data. The impact is limited to con...

CVE-2026-87230

CVE-2026-87230 affects the Security component of Oracle Hyperion Financial Management (version 11.2.26.0.000 ). An unauthenticated attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction. The scope is changed , meaning attacks may significa...

CVE-2026-70854

CVE-2026-70854 is a CVSS 9.1 CRITICAL vulnerability in Oracle Hyperion Financial Management v11.2.25.0.000. An unauthenticated attacker with network access via HTTP can compromise the Security component, causing unauthorized data modification/deletion and repeatable DoS crashes. No exploit code o...

CVE-2026-70919

Oracle Hyperion Financial Management 11.2.25.0.000 has a Security component flaw requiring local infrastructure access, high complexity, and human interaction; successful exploitation grants unauthorized update/insert/delete access to application data. No exploit details provided. Patch status no...

CVE-2026-71119

Oracle HFM Security component in version 11.2.25.0.000 is affected by a local vulnerability exploitable only by a high-privileged attacker with infrastructure access, potentially resulting in full application takeover (CVSS 6.4). No exploit details are provided; Oracle's August 2026 security advi...

CVE-2026-71150

Oracle Hyperion Financial Management (affected version 11.2.25.0.000), Security component, is vulnerable to a network-exploitable flaw: a low-privileged HTTP attacker can fully compromise the application (CVSS 8.8 HIGH). No in-the-wild exploitation reported; Oracle's August 2026 CPU patches it — ...

CVE-2026-87182

Oracle Hyperion Financial Management (component: Security ) in version 11.2.26.0.000 is affected by a local vulnerability that allows a low-privileged attacker with logon access to the host infrastructure to compromise the product. The vulnerability is rated HIGH (CVSS 3.1: 8.8 , vector AV:L/AC:L...

CVE-2026-60682

Oracle Hyperion Financial Reporting (version 11.2.25.0.000), Repository component, is vulnerable to unauthenticated HTTP attacks allowing unauthorized read, update, insert, and delete access to data. CVSS 3.1 score 6.5 (Medium). Oracle's August 2026 CPU addresses the issue (https://www.oracle.com...

CVE-2026-70850

Oracle Hyperion Financial Management 11.2.25.0.000 Security component is affected by a LOW-severity local vulnerability (CVSS 3.0) requiring high privileges; a local attacker can modify data and cause partial DoS. No exploitation details are provided; monitor Oracle's August 2026 advisory for pat...

CVE-2026-70943

The Oracle Hyperion Financial Management Security component, version 11.2.25.0.000, is vulnerable to an unauthenticated, easily exploitable flaw requiring adjacent network access. Successful exploitation grants full confidentiality and integrity compromise of all accessible HFM data. CVSS 3.1 sco...

CVE-2026-87176

CVE-2026-87176 affects the Security component of Oracle Hyperion Financial Management (version 11.2.26.0.000 ). An unauthenticated attacker with network access via TCP and low attack complexity can exploit this vulnerability to gain high confidentiality and integrity impact —specifically, unautho...

CVE-2026-87178

CVE-2026-87178 affects the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000 . An easily exploitable vulnerability allows a high-privileged attacker with network access via SQL to compromise the product. The attack has a scope change , meaning it may significantly i...

CVE-2026-87189

Oracle Hyperion Financial Management (component: Security ) is affected in supported version 11.2.26.0.000 . The vulnerability is easily exploitable by a high-privileged attacker with network access via Oracle Net . Although the flaw resides in Financial Management, the scope change means attacks...

CVE-2026-87192

CVE-2026-87192 affects the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data accessible by the application and cause a partial denial...

CVE-2026-87207

Oracle Hyperion Financial Management (component: Security , version 11.2.26.0.000 ) is affected by an easily exploitable vulnerability reachable via network access through SQL . A high-privileged attacker requires no user interaction to exploit it, resulting in full takeover of the product. The C...

CVE-2026-87217

Oracle Hyperion Financial Management (component: Security ), version 11.2.26.0.000 , is vulnerable to an easily exploitable, unauthenticated network attack via HTTP . A successful attack allows the attacker to create, delete, or modify critical data and gain unauthorized access to all data access...

CVE-2026-70912

CVE-2026-70912 affects Oracle Hyperion Financial Management component Security, version 11.2.25.0.000. A low-privileged local attacker with human interaction can achieve unauthorized integrity access to all accessible data. CVSS 3.1 score 5.3 (Medium). Patch details not provided in the documents;...

CVE-2026-70917

Oracle Hyperion Financial Management version 11.2.25.0.000 contains a Security component flaw allowing unauthenticated local attackers to gain unauthorized read access to a subset of application data. CVSS 3.1 score is 4.0 (MEDIUM). No patch version or exploit details are provided in the document...

CVE-2026-70920

Oracle Hyperion Financial Management 11.2.25.0.000 has a critical SQL-based Security component flaw (CVSS 9.9) exploitable by low-privileged network attackers, enabling full product takeover with scope impact to other systems. Oracle published advisory CSPAug2026. No exploit code or in-the-wild e...

CVE-2026-70940

Oracle Hyperion Financial Management 11.2.25.0.000 has an easily exploitable Security component flaw (CVSS 8.8) allowing low-privileged attackers to fully compromise the application via HTTP. No exploit code or in-the-wild exploitation details are provided; see Oracle's August 2026 CPU advisory f...

CVE-2026-71090

Oracle Hyperion Financial Management version 11.2.25.0.000 has a Security component vulnerability exploitable via HTTP by a low-privileged attacker, enabling DoS crashes, unauthorized data read, and limited update/delete access; CVSS 6.4 MEDIUM. No exploit details or patch version provided; monit...

CVE-2026-71108

Oracle Hyperion Financial Management version 11.2.25.0.000 has a Security component flaw exploitable over HTTP by a low-privileged attacker, enabling unauthorized access to critical data. CISA's SSVC assessment rates exploitation risk as none and technical impact as partial. Oracle's August 2026 ...

CVE-2026-87171

CVE-2026-87171 affects the Security component of Oracle Hyperion Financial Management , version 11.2.26.0.000 . An unauthenticated attacker with network access via HTTPS can exploit this vulnerability, though the attack complexity is rated high (difficult to exploit). The scope is changed , meani...

CVE-2026-87175

Oracle Hyperion Financial Management version 11.2.26.0.000 has a vulnerability in its Security component. An unauthenticated attacker with network access via TCP can exploit this easily (no user interaction, low complexity) to gain unauthorized read and write access to critical data, resulting in...

CVE-2026-87203

Oracle Hyperion Financial Management version 11.2.26.0.000 is affected by a vulnerability in its Security component. A low-privileged attacker with network access via HTTP can exploit this flaw, though exploitation is rated as difficult (high attack complexity). Successful exploitation results in...