CVE-2026-71145

The Security component of Oracle Hyperion Financial Management 11.2.25.0.000 is affected by a network-based vulnerability exploitable by a low-privileged attacker requiring human interaction, yielding unauthorized read/write access to some application data (CVSS 4.4 MEDIUM). Oracle's August 2026 ...

CVE-2026-70840

A HIGH-severity (CVSS 8.4) flaw exists in Oracle Hyperion Financial Management's Security component, affecting version 11.2.25.0.000. An attacker with low privileges and local access can exploit it to gain unauthorized read/write access to all accessible HFM data, with scope extending beyond the ...

CVE-2026-70853

Oracle Hyperion Financial Management version 11.2.25.0.000 is affected in its Security component. A high-privileged attacker with network HTTP access can gain unauthorized read access to a subset of data and cause partial denial of service. CVSS 3.1 Base Score is 3.3 (LOW). No exploit code or in-...

CVE-2026-70975

Oracle's August 2026 Critical Patch Update (referenced in the advisory) provides the fix. Affected version is HFM 11.2.25.0.000; organizations should apply the CSP patch immediately to prevent unauthorized data exposure.

CVE-2026-71085

CVE-2026-71085 affects Oracle Hyperion Financial Management 11.2.25.0.000, specifically its Security component. A high-privileged attacker with network HTTP access can gain unauthorized read access to critical or all application data (CVSS 4.9, MEDIUM). No exploitation evidence is provided. Oracl...

CVE-2026-71090

Oracle Hyperion Financial Management version 11.2.25.0.000 has a Security component vulnerability exploitable via HTTP by a low-privileged attacker, enabling DoS crashes, unauthorized data read, and limited update/delete access; CVSS 6.4 MEDIUM. No exploit details or patch version provided; monit...

CVE-2026-71103

Oracle Hyperion Financial Management 11.2.25.0.000 has an easily exploitable Security component flaw (CVSS 6.3, MEDIUM). A low-privileged, network-based attacker via HTTP can read partial data, modify some records, and cause partial DoS. CISA SSVC rates exploitation as none; no patch version is s...

CVE-2026-71105

A local, low-privileged attacker can cause a denial-of-service (hang/crash) in Oracle Hyperion Financial Management v11.2.25.0.000 via the Security component; Oracle's August 2026 CPU patch addresses it. Exploitation details are not provided in the documents.

CVE-2026-71123

Oracle Hyperion Financial Management 11.2.25.0.000 has an unauthenticated HTTP-accessible vulnerability in its Security component, allowing low-complexity attacks requiring user interaction to gain unauthorized read/write access to data (CVSS 5.4, MEDIUM). Oracle's August 2026 CPU advisory is the...

CVE-2026-70834

Oracle's August 2026 CPU advisory (cspuaug2026.html) patches CVE-2026-70834, a HIGH-severity (CVSS 7.2) flaw in the Security component of Oracle Hyperion Financial Management 11.2.25.0.000, exploitable over HTTP by a high-privileged attacker to compromise the application. No exploit code or in-th...

CVE-2026-70838

Oracle Hyperion Financial Management version 11.2.25.0.000 has a Security component flaw; a low-privileged local attacker can access critical data and modify some records. CVSS 6.1 (Medium). Oracle's August 2026 CPU advisory addresses this vulnerability.

CVE-2026-70841

The Oracle Security Alert (CSPAug2026) referenced in the documents is not publicly accessible, so no patch version or remediation guidance can be confirmed. Affected version 11.2.25.0.000 has CVSS 5.6; no exploit code is provided. Monitor Oracle advisory for patch details.

CVE-2026-70938

CVE-2026-70938 affects Oracle Hyperion Financial Management version 11.2.25.0.000 in the Security component. A low-privileged attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data or complete access to all data accessible through the pro...

CVE-2026-70942

Oracle's August 2026 Critical Patch Update (referenced in the CVE) addresses CVE-2026-70942 in the Security component of HFM 11.2.25.0.000, a HIGH-severity issue exploitable by low-privileged network attackers with no user interaction. No exploitation details are provided; apply Oracle's August 2...

CVE-2026-60682

Oracle Hyperion Financial Reporting (version 11.2.25.0.000), Repository component, is vulnerable to unauthenticated HTTP attacks allowing unauthorized read, update, insert, and delete access to data. CVSS 3.1 score 6.5 (Medium). Oracle's August 2026 CPU addresses the issue (https://www.oracle.com...

CVE-2026-70743

Oracle Hyperion Financial Reporting Server version 11.2.25.0.000 has an unauthenticated network-exploitable flaw (CVSS 8.2) allowing attackers to access all product data and cause partial denial of service. Oracle's August 2026 CPU advisory likely contains remediation guidance. No exploit details...

CVE-2026-70817

CVE-2026-70817 is a critical (CVSS 9.8) flaw in the Security component of Oracle Hyperion Financial Management 11.2.25.0.000. An unauthenticated remote attacker can exploit it over HTTP to fully compromise the application. No exploitation evidence or patch details are provided in the documents. O...

CVE-2026-70824

Oracle Hyperion Financial Management (component: Security) is affected in version 11.2.25.0.000. A low-privileged network attacker can exploit it via HTTP to gain unauthorized read access to critical or all accessible data (CVSS 6.5, MEDIUM). No patch details, root cause, or in-the-wild exploitat...

CVE-2026-70914

Oracle Hyperion Financial Management version 11.2.25.0.000 has a HIGH-severity (CVSS 7.0) vulnerability in its Security component. An unauthenticated attacker with infrastructure access can compromise the application, requiring human interaction, leading to full confidentiality, integrity, and av...

CVE-2026-71120

A denial-of-service flaw in Oracle Hyperion Financial Management 11.2.25.0.000's Security component allows a low-privileged attacker to crash the application remotely via HTTP. CVSS 5.3 MEDIUM. No patch version or exploit details are provided; Oracle's August 2026 CPU advisory is the reference. M...

CVE-2026-70836

Oracle Hyperion Financial Management 11.2.25.0.000 contains a Security component flaw exploitable by a low-privileged local attacker (CVSS 5.5) to access all application data; no patch or exploit details are provided, so monitor Oracle's CSP advisory for remediation updates.

CVE-2026-71144

Oracle Hyperion Financial Management version 11.2.25.0.000 has a local Security component vulnerability exploitable only by a high-privileged attacker with infrastructure logon access. Successful exploitation allows unauthorized read and limited update/insert/delete access to accessible data; ava...

CVE-2026-71148

Oracle Hyperion Financial Management version 11.2.25.0.000 is affected by an unauthenticated vulnerability in the Security component. An attacker with network access via HTTP can exploit this with low complexity to gain unauthorized read access to a subset of the product's accessible data. The CV...

CVE-2026-70821

CVE-2026-70821 affects Oracle Hyperion Financial Management version 11.2.25.0.000 (Security component). A low-privileged attacker with network SQL access can achieve full compromise (CVSS 8.8). No patch version or exploit details are provided in the documents; see Oracle's August 2026 security al...

CVE-2026-70825

CVE-2026-70825 affects Oracle Hyperion Financial Management version 11.2.25.0.000 (Security component). A low-privileged remote attacker can exploit it over HTTP to gain unauthorized access to critical data, scoring CVSS 6.5 (Medium). Oracle's August 2026 CPU advisory is referenced; no exploit co...

CVE-2026-70916

The Security component of Oracle Hyperion Financial Management version 11.2.25.0.000 is affected. An unauthenticated attacker with local infrastructure access can gain unauthorized read access to a subset of application data. CVSS 3.1 score 4.0 (Medium). Oracle's August 2026 CPU advisory is the p...

CVE-2026-71060

CVE-2026-71060 affects Oracle Hyperion Financial Management 11.2.25.0.000 (Security component). A high-privileged remote attacker via HTTP can gain unauthorized access to critical data. CVSS 4.4 MEDIUM. Patch details are not provided in the available documents; consult Oracle's August 2026 CPU ad...

CVE-2026-71146

Oracle Hyperion Financial Management 11.2.25.0.000 Security component has a local DoS flaw (CVSS 1.9 LOW); high-privilege local attacker can cause partial service disruption. No exploitation observed; patch details not provided in documents.

CVE-2026-70832

CVE-2026-70832 affects the Security component of Oracle Hyperion Financial Management version 11.2.25.0.000 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data or complete access to all data accessible through the ...

CVE-2026-70847

Oracle HFM 11.2.25.0.000 Security component has a medium-severity local vulnerability (CVSS 6.5) allowing a low-privileged local attacker to access all HFM data. No root cause or patch details are provided in the documents; exploitation details are not available.

CVE-2026-70849

Oracle Hyperion Financial Management (version 11.2.25.0.000 ) contains a vulnerability in its Security component. A high-privileged attacker with network access via HTTP can exploit this flaw to gain unauthorized access to critical data or cause a complete denial of service (hang or repeatable cr...

CVE-2026-70851

Oracle Hyperion Financial Management 11.2.25.0.000 has a Security component flaw exploitable over HTTP by a low-privileged attacker, causing partial denial of service (CVSS 3.1 base score 3.1, LOW). No exploit code or in-the-wild exploitation is documented; refer to Oracle's CSPUAugust2026 adviso...

CVE-2026-71118

Oracle Hyperion Financial Management (component: Security , version 11.2.25.0.000 ) is affected by a vulnerability exploitable by an unauthenticated attacker over the network via HTTP . The attack complexity is rated high , making exploitation difficult. Successful exploitation allows an attacker...

CVE-2026-70826

Oracle Hyperion Financial Management 11.2.25.0.000 has an easily exploitable security component flaw. A low-privileged attacker with network HTTP access can obtain unauthorized access to critical data. CVSS 3.1 score is 6.5 (MEDIUM), with high confidentiality impact. No exploits are currently kno...

CVE-2026-70843

Oracle Hyperion Financial Management 11.2.25.0.000 Security component has a CVSS 6.8 medium-severity flaw exploitable by an unauthenticated attacker on the physical communication segment, enabling unauthorized creation, deletion, modification, and full read access to all application data. Oracle ...