CVE-2019-10219

The CVE-2019-10219 entry affects Hibernate Validator: SafeHtml validator annotation fails to sanitize HTML comments/instructions, enabling XSS in affected code paths. Affected CP4S versions are 1.7.2.0, 1.8.0.0, and 1.8.1.0. Remediation is to upgrade to Cloud Pak for Security 1.9.0.0 per IBM guid...

CVE-2021-2158

CVE-2021-2158 affects Oracle Hyperion Financial Management (HFM) with the Task Automation component, specifically version 11.1.2.4. Multiple sources (NVD, Red Hat, CNVD, CVE listings) describe a vulnerability that is exploitable by a high-privileged attacker with network access over HTTP, with us...

CVE-2026-70952

Oracle Hyperion Financial Management version 11.2.25.0.000 is affected by a HIGH-severity (CVSS 3.1 base score 8.2) vulnerability in its Security component. An unauthenticated attacker with network access via HTTP can exploit it to gain unauthorized access to critical or all product data and caus...

CVE-2019-2899

CVE-2019-2899 affects Oracle JDeveloper and ADF (OAM component) in Oracle Fusion Middleware. Affected versions: 11.1.1.9.0, 11.1.2.4.0, 12.1.3.0.0, 12.2.1.3.0. The vulnerability is due to insufficient access control in OAM, allowing a high-privilege attacker with network access via HTTP to compro...

CVE-2020-2777

Oracle Hyperion Financial Management (HFM) 11.1.2.4 Security component is affected. The vulnerability allows a high-privilege attacker with network access via HTTP to compromise HFM, with exploitation requiring user interaction and potentially enabling unauthorized creation, deletion, or modifica...

CVE-2012-1714

CVE-2012-1714 affects Oracle Hyperion Financial Management (HFM) versions 11.1.1.4 and 11.1.2.1.104, via a vulnerability in the TList 6 ActiveX control. The issue permits remote code execution through unknown vectors; no concrete exploit details or impact vector are provided beyond this, and no r...

CVE-2026-70935

Oracle Hyperion Financial Management 11.2.25.0.000 has a Security-component flaw: a low-privileged attacker with network HTTP access can read all accessible data (HIGH confidentiality) and cause partial DoS (LOW availability), CVSS 7.1. No patch version or exploit details are provided; see Oracle...

CVE-2026-70831

Oracle HFM 11.2.25.0.000 has an easily exploitable HTTP-based security flaw. A low-privileged, network-attached attacker can gain unauthorized access to critical or all accessible HFM data (CVSS 6.5, Confidentiality: HIGH). Oracle's August 2026 CPU advisory (https://www.oracle.com/security-alerts...

CVE-2026-70944

Oracle's August 2026 Critical Patch Update (CSPRAUG2026) addresses CVE-2026-70944, a high-severity flaw in the Security component of Hyperion Financial Management 11.2.25.0.000, exploitable over TCP by a low-privileged attacker to achieve full product compromise (CVSS 8.8). Apply the August 2026 ...

CVE-2026-70933

Oracle Hyperion Financial Management 11.2.25.0.000 Security component is vulnerable; a low-privileged network attacker can access all accessible data and cause partial DoS via HTTP. CVSS 7.1 (HIGH). No exploit or in-the-wild exploitation details provided. Patch status not specified in documents.

CVE-2026-70842

Oracle Hyperion Financial Management v11.2.25.0.000 (Security component) is affected by an easily exploitable local vulnerability (CVSS 8.4 HIGH). A low-privileged attacker with infrastructure access can compromise the product, achieving unauthorized read/write access to all accessible data, with...

CVE-2026-70921

Oracle Hyperion Financial Management 11.2.25.0.000 has a critical Security-component flaw (CVSS 10.0) exploitable by unauthenticated, network-adjacent attackers via TLS, granting unauthorized read/write access to all HFM data; scope change may affect additional Oracle products. Oracle's August 20...

CVE-2026-70823

CVE-2026-70823 affects the Security component of Oracle Hyperion Financial Management version 11.2.25.0.000 . An unauthenticated attacker with network access via HTTPS can exploit this vulnerability, though it is rated as difficult to exploit (high attack complexity). Successful exploitation allo...

CVE-2026-70909

Oracle Hyperion Financial Management (component: Security), version 11.2.25.0.000 , has an easily exploitable flaw allowing an unauthenticated remote attacker to access all accessible data and cause partial denial of service. Oracle's August 2026 CPU advisory (cspuaug2026.html) provides the offic...

CVE-2026-70911

Oracle's August 2026 Critical Patch Update (CSPAug2026) addresses CVE-2026-70911, a medium-severity (CVSS 5.3) Security component flaw in Hyperion Financial Management 11.2.25.0.000 that allows unauthenticated remote attackers to read a subset of accessible data via HTTP; apply Oracle's August 20...

CVE-2026-70925

Oracle Hyperion Financial Management (component: Security ), version 11.2.25.0.000 , is affected by an easily exploitable vulnerability that allows a low-privileged attacker with network access via SQL to compromise the product. Successful exploitation results in unauthorized creation, deletion, ...

CVE-2026-70828

Oracle Hyperion Financial Management 11.2.25.0.000 Security component is vulnerable to a HIGH-severity (CVSS 7.7) flaw exploitable over HTTP by a low-privileged attacker, allowing unauthorized access to critical data with scope change affecting other products. No in-the-wild exploitation details ...

CVE-2026-70940

Oracle Hyperion Financial Management 11.2.25.0.000 has an easily exploitable Security component flaw (CVSS 8.8) allowing low-privileged attackers to fully compromise the application via HTTP. No exploit code or in-the-wild exploitation details are provided; see Oracle's August 2026 CPU advisory f...

CVE-2026-70854

CVE-2026-70854 is a CVSS 9.1 CRITICAL vulnerability in Oracle Hyperion Financial Management v11.2.25.0.000. An unauthenticated attacker with network access via HTTP can compromise the Security component, causing unauthorized data modification/deletion and repeatable DoS crashes. No exploit code o...

CVE-2026-70850

Oracle Hyperion Financial Management 11.2.25.0.000 Security component is affected by a LOW-severity local vulnerability (CVSS 3.0) requiring high privileges; a local attacker can modify data and cause partial DoS. No exploitation details are provided; monitor Oracle's August 2026 advisory for pat...

CVE-2026-70928

The Security component of Oracle Hyperion Financial Management (version 11.2.25.0.000) is vulnerable to SQL-based attacks by low-privileged network attackers, enabling full system compromise (CVSS 8.8, HIGH). No exploitation details are provided. Patch status is not specified in the available doc...

CVE-2026-70946

Oracle Hyperion Financial Management 11.2.25.0.000 has a Security component flaw; a low-privileged remote attacker can exploit it over HTTP to fully compromise the application (CVSS 7.5, HIGH). Oracle's August 2026 CPU advisory addresses this issue.

CVE-2026-70929

Oracle Hyperion Financial Management 11.2.25.0.000 has a HIGH-severity (CVSS 8.1) Security component flaw: a low-privileged attacker with network HTTP access can gain unauthorized read/write access to all application data. No patch details or exploitation evidence are provided. Apply Oracle's Aug...

CVE-2026-70936

CVE-2026-70936 affects Oracle Hyperion Financial Management 11.2.25.0.000 (Security component). A low-privileged local attacker can gain unauthorized read/write access to all HFM data (CVSS 7.1, HIGH). Exploitation details are not provided; Oracle's August 2026 CPU advisory is the primary referen...

CVE-2026-70943

The Oracle Hyperion Financial Management Security component, version 11.2.25.0.000, is vulnerable to an unauthenticated, easily exploitable flaw requiring adjacent network access. Successful exploitation grants full confidentiality and integrity compromise of all accessible HFM data. CVSS 3.1 sco...

CVE-2026-71121

Oracle Hyperion Financial Management 11.2.25.0.000 has an easily exploitable security component flaw (CVSS 6.5 MEDIUM) allowing unauthenticated remote attackers via HTTP to modify data and cause partial denial of service. Oracle's August 2026 security alert provides patch details. Exploitation de...

CVE-2026-70917

Oracle Hyperion Financial Management version 11.2.25.0.000 contains a Security component flaw allowing unauthenticated local attackers to gain unauthorized read access to a subset of application data. CVSS 3.1 score is 4.0 (MEDIUM). No patch version or exploit details are provided in the document...

CVE-2026-70920

Oracle Hyperion Financial Management 11.2.25.0.000 has a critical SQL-based Security component flaw (CVSS 9.9) exploitable by low-privileged network attackers, enabling full product takeover with scope impact to other systems. Oracle published advisory CSPAug2026. No exploit code or in-the-wild e...

CVE-2026-71108

Oracle Hyperion Financial Management version 11.2.25.0.000 has a Security component flaw exploitable over HTTP by a low-privileged attacker, enabling unauthorized access to critical data. CISA's SSVC assessment rates exploitation risk as none and technical impact as partial. Oracle's August 2026 ...

CVE-2026-70912

CVE-2026-70912 affects Oracle Hyperion Financial Management component Security, version 11.2.25.0.000. A low-privileged local attacker with human interaction can achieve unauthorized integrity access to all accessible data. CVSS 3.1 score 5.3 (Medium). Patch details not provided in the documents;...

CVE-2026-60391

An unauthenticated, network-accessible attacker can exploit Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) via HTTP to gain unauthorized access to critical data, with no user interaction required (CVSS 7.5, HIGH). No exploitation or patch details are provided in the documents.

CVE-2026-70919

Oracle Hyperion Financial Management 11.2.25.0.000 has a Security component flaw requiring local infrastructure access, high complexity, and human interaction; successful exploitation grants unauthorized update/insert/delete access to application data. No exploit details provided. Patch status no...

CVE-2026-70934

Oracle Hyperion Financial Management (Security component), version 11.2.25.0.000, has an easily exploitable flaw allowing a low-privileged remote attacker via HTTP to access all accessible data and cause partial denial of service. CVSS 7.1 (High). Oracle's August 2026 CPU advisory provides remedi...

CVE-2026-70939

Oracle Hyperion Financial Management version 11.2.25.0.000's Security component is affected; a high-privileged network attacker can exploit it via HTTP to fully compromise the application (CVSS 7.2 HIGH). Patch details are in Oracle's August 2026 CPU advisory; no exploitation evidence is provided...

CVE-2026-70950

Oracle Hyperion Financial Management Security component (version 11.2.25.0.000) has an easily exploitable HIGH-severity flaw (CVSS 7.2) allowing a high-privileged network attacker via HTTP to achieve full system takeover with high confidentiality, integrity, and availability impact. No exploitati...

CVE-2026-70974

A network-exploitable vulnerability in the Security component of Oracle Hyperion Financial Management 11.2.25.0.000 allows a low-privileged attacker to gain unauthorized access to all application data, with confidentiality impact rated HIGH under CVSS 3.1 (score 5.3). No patch version or exploit ...

CVE-2026-71147

Oracle Hyperion Financial Management version 11.2.25.0.000 is affected in its Security component. A difficult-to-exploit, unauthenticated HTTP-based attack requiring human interaction can yield unauthorized data modification (update/insert/delete) and partial denial of service. CVSS 3.1 score is ...

CVE-2026-71150

Oracle Hyperion Financial Management (affected version 11.2.25.0.000), Security component, is vulnerable to a network-exploitable flaw: a low-privileged HTTP attacker can fully compromise the application (CVSS 8.8 HIGH). No in-the-wild exploitation reported; Oracle's August 2026 CPU patches it — ...

CVE-2026-70818

Oracle Hyperion Financial Management version 11.2.25.0.000 contains a HIGH-severity (CVSS 8.8) SQL-based Security component flaw. A low-privileged, network-accessible attacker can exploit it to fully compromise CIA triad — leading to application takeover. No exploitation evidence or patch details...

CVE-2026-70819

Oracle Hyperion Financial Management 11.2.25.0.000 has a HIGH-severity SQL-based security flaw exploitable by a low-privileged network attacker, enabling full system compromise (C/I/A all high). No exploitation or patch details are provided; Oracle's August 2026 CPU is the referenced remediation ...

CVE-2026-70822

CVE-2026-70822 affects the Security component of Oracle Hyperion Financial Management version 11.2.25.0.000 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data or complete access to all data accessible through the ...

CVE-2026-70937

A HIGH-severity flaw in Oracle Hyperion Financial Management 11.2.25.0.000 Security component allows a low-privileged, network-authenticated attacker via HTTP to achieve full product compromise (confidentiality, integrity, availability). No exploitation evidence is provided; Oracle's August 2026 ...

CVE-2026-70960

Oracle Hyperion Financial Management 11.2.25.0.000 has a HIGH-severity (CVSS 7.6) Security component flaw exploitable over HTTP by a low-privileged attacker, enabling unauthorized data access and modification with scope change. Oracle's August 2026 CPU patch is the remediation. No in-the-wild exp...

CVE-2026-71117

Oracle Hyperion Financial Management version 11.2.25.0.000 contains a Security-component flaw (CVSS 7.5, HIGH) exploitable by a high-privileged local attacker to fully compromise the application and potentially other products. Oracle's August 2026 CPU advisory is the remediation reference. No exp...

CVE-2026-71119

Oracle HFM Security component in version 11.2.25.0.000 is affected by a local vulnerability exploitable only by a high-privileged attacker with infrastructure access, potentially resulting in full application takeover (CVSS 6.4). No exploit details are provided; Oracle's August 2026 security advi...

CVE-2026-71149

Oracle Hyperion Financial Management 11.2.25.0.000 Security component is affected: a low-privileged local attacker can, with human interaction, gain unauthorized data read/write access and partial DoS (CVSS 4.2 MEDIUM). Oracle's CSPR August 2026 advisory provides patch details.

CVE-2026-70848

CVE-2026-70848 affects Oracle Hyperion Financial Management component Security, version 11.2.25.0.000, with CVSS 3.7 LOW severity. An unauthenticated remote attacker can obtain limited unauthorized read access to application data; no exploit or patch details are provided in the documents.

CVE-2026-70969

A medium-severity (CVSS 6.5) confidentiality flaw in Oracle Hyperion Financial Management's Security component, version 11.2.25.0.000, allows a low-privileged, network-authenticated attacker via HTTP to access all product data. No exploitation evidence or patch details are provided; Oracle's Augu...

CVE-2026-71091

Oracle Hyperion Financial Management 11.2.25.0.000 has an easily exploitable SQL-based vulnerability in the Security component, allowing a high-privileged remote attacker to achieve unauthorized read and write access to critical data (CVSS 6.5, Medium). No patch version or remediation is specifie...

CVE-2026-71109

Oracle Hyperion Financial Management 11.2.25.0.000 Security component has an easily exploitable local vulnerability allowing high-privileged attackers with infrastructure access to fully compromise the product (CVSS 6.7). No exploitation details are provided. Patch status is not specified in the ...