CVE-2026-71108

Oracle Hyperion Financial Management version 11.2.25.0.000 has a Security component flaw exploitable over HTTP by a low-privileged attacker, enabling unauthorized access to critical data. CISA's SSVC assessment rates exploitation risk as none and technical impact as partial. Oracle's August 2026 ...

CVE-2026-71123

Oracle Hyperion Financial Management 11.2.25.0.000 has an unauthenticated HTTP-accessible vulnerability in its Security component, allowing low-complexity attacks requiring user interaction to gain unauthorized read/write access to data (CVSS 5.4, MEDIUM). Oracle's August 2026 CPU advisory is the...

CVE-2026-87175

Oracle Hyperion Financial Management version 11.2.26.0.000 has a vulnerability in its Security component. An unauthenticated attacker with network access via TCP can exploit this easily (no user interaction, low complexity) to gain unauthorized read and write access to critical data, resulting in...

CVE-2026-87183

Oracle Hyperion Financial Management (version 11.2.26.0.000) contains a vulnerability in the Security component that allows a high-privileged local attacker to take over the application, resulting in full compromise of confidentiality, integrity, and availability. Exploitation requires low comple...

CVE-2026-87194

CVE-2026-87194 affects Oracle Hyperion Financial Management version 11.2.26.0.000 , in the Security component. An unauthenticated attacker with network access via HTTP can exploit this with low complexity to gain unauthorized access to critical data or complete access to all data accessible to th...

CVE-2026-87203

Oracle Hyperion Financial Management version 11.2.26.0.000 is affected by a vulnerability in its Security component. A low-privileged attacker with network access via HTTP can exploit this flaw, though exploitation is rated as difficult (high attack complexity). Successful exploitation results in...

CVE-2026-87208

This vulnerability affects the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000 . A low-privileged attacker with network access via HTTP can exploit it to gain unauthorized access to critical data and perform unauthorized updates, inserts, or deletes on accessible ...

CVE-2026-87213

Oracle Hyperion Financial Management (component: Security ) version 11.2.26.0.000 is affected by a high-complexity, unauthenticated vulnerability exploitable over HTTP . A successful attack allows an attacker to create, delete, or modify data and gain unauthorized read access to data accessible b...

CVE-2026-87227

Oracle Hyperion Financial Management (component: Security ) in version 11.2.26.0.000 is vulnerable to a network-based attack via HTTP that requires only a low-privileged account and no user interaction. A successful exploit allows full takeover of the application, resulting in high impact to conf...

CVE-2026-87232

This vulnerability affects the Security component of Oracle Hyperion Financial Management (version 11.2.26.0.000). An unauthenticated attacker with access to the physical communication segment (adjacent network) where the product executes can compromise it, resulting in unauthorized creation, del...

CVE-2026-87249

Oracle Hyperion Financial Management 11.2.26.0.000 (component: Security ) is affected by an easily exploitable vulnerability allowing an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation requires user interaction from a person other than the ...

CVE-2026-87173

CVE-2026-87173 affects the Security component of Oracle Hyperion Financial Management (version 11.2.26.0.000 ). An unauthenticated attacker with network access via TCP can exploit this vulnerability with low complexity to compromise the product. Successful exploitation results in unauthorized cre...

CVE-2026-87181

Oracle Hyperion Financial Management (component: Security ), version 11.2.26.0.000 , is affected by a high-severity vulnerability (CVSS 3.1 base score 8.8 ). A low-privileged attacker with network access via HTTP can exploit it with low complexity and no user interaction to achieve full takeover ...

CVE-2026-87187

Oracle Hyperion Financial Management (component: Security ) in version 11.2.26.0.000 is affected by an easily exploitable vulnerability. An unauthenticated attacker with access to the adjacent physical communication segment where the product executes can compromise the system, resulting in a full...

CVE-2026-87190

Oracle Hyperion Financial Management (component: Security , version 11.2.26.0.000 ) is affected by a vulnerability that allows a low-privileged attacker with network access via HTTP to achieve full takeover of the product, impacting confidentiality, integrity, and availability (CVSS 3.1: 7.5 HIGH...

CVE-2026-87216

CVE-2026-87216 affects the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000 . The vulnerability is easily exploitable by a low-privileged attacker who has logon to the infrastructure where the product executes. Successful exploitation results in full takeover of th...

CVE-2026-70929

Oracle Hyperion Financial Management 11.2.25.0.000 has a HIGH-severity (CVSS 8.1) Security component flaw: a low-privileged attacker with network HTTP access can gain unauthorized read/write access to all application data. No patch details or exploitation evidence are provided. Apply Oracle's Aug...

CVE-2026-70936

CVE-2026-70936 affects Oracle Hyperion Financial Management 11.2.25.0.000 (Security component). A low-privileged local attacker can gain unauthorized read/write access to all HFM data (CVSS 7.1, HIGH). Exploitation details are not provided; Oracle's August 2026 CPU advisory is the primary referen...

CVE-2026-70974

A network-exploitable vulnerability in the Security component of Oracle Hyperion Financial Management 11.2.25.0.000 allows a low-privileged attacker to gain unauthorized access to all application data, with confidentiality impact rated HIGH under CVSS 3.1 (score 5.3). No patch version or exploit ...

CVE-2026-71147

Oracle Hyperion Financial Management version 11.2.25.0.000 is affected in its Security component. A difficult-to-exploit, unauthenticated HTTP-based attack requiring human interaction can yield unauthorized data modification (update/insert/delete) and partial denial of service. CVSS 3.1 score is ...

CVE-2026-87177

Oracle Hyperion Financial Management version 11.2.26.0.000 is affected by a vulnerability in its Security component. A low-privileged attacker with network access via HTTP can exploit this with low complexity and no user interaction. Due to scope change , attacks may significantly impact addition...

CVE-2026-87184

Oracle Hyperion Financial Management (component: Security ) in supported version 11.2.26.0.000 is affected by an easily exploitable vulnerability that allows an unauthenticated attacker with network access via SQL to fully compromise the product. Successful exploitation results in takeover with h...

CVE-2026-87188

Oracle Hyperion Financial Management (component: Security , version 11.2.26.0.000 ) is affected by an easily exploitable vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation results in full takeover with high impact t...

CVE-2026-87202

Oracle Hyperion Financial Management (component: Security ), version 11.2.26.0.000 , is affected by an easily exploitable vulnerability. A low-privileged attacker with network access via SQL can compromise the application with low complexity and no user interaction, leading to full takeover of th...

CVE-2026-87223

A critical vulnerability (CVSS 3.1 base score 9.1 ) exists in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability with low complexity to gain unauthorized creation, deletion,...

CVE-2026-87231

Oracle Hyperion Financial Management version 11.2.26.0.000 is affected in the Security component. An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to achieve full takeover of the product (high confidentiality, integrity, and availability...

CVE-2026-87237

This vulnerability affects the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000 . A low-privileged attacker with network access via HTTP can exploit it, though the attack is rated difficult to exploit (high complexity, no user interaction required). Successful expl...

CVE-2026-87240

CVE-2026-87240 affects Oracle Hyperion Financial Management version 11.2.26.0.000 in the Security component. A low-privileged attacker with local access to the infrastructure where the product executes can exploit this vulnerability with high complexity to achieve takeover of Oracle Hyperion Fina...

CVE-2026-70934

Oracle Hyperion Financial Management (Security component), version 11.2.25.0.000, has an easily exploitable flaw allowing a low-privileged remote attacker via HTTP to access all accessible data and cause partial denial of service. CVSS 7.1 (High). Oracle's August 2026 CPU advisory provides remedi...

CVE-2026-70950

Oracle Hyperion Financial Management Security component (version 11.2.25.0.000) has an easily exploitable HIGH-severity flaw (CVSS 7.2) allowing a high-privileged network attacker via HTTP to achieve full system takeover with high confidentiality, integrity, and availability impact. No exploitati...

CVE-2026-71103

Oracle Hyperion Financial Management 11.2.25.0.000 has an easily exploitable Security component flaw (CVSS 6.3, MEDIUM). A low-privileged, network-based attacker via HTTP can read partial data, modify some records, and cause partial DoS. CISA SSVC rates exploitation as none; no patch version is s...

CVE-2026-71148

Oracle Hyperion Financial Management version 11.2.25.0.000 is affected by an unauthenticated vulnerability in the Security component. An attacker with network access via HTTP can exploit this with low complexity to gain unauthorized read access to a subset of the product's accessible data. The CV...

CVE-2026-71149

Oracle Hyperion Financial Management 11.2.25.0.000 Security component is affected: a low-privileged local attacker can, with human interaction, gain unauthorized data read/write access and partial DoS (CVSS 4.2 MEDIUM). Oracle's CSPR August 2026 advisory provides patch details.

CVE-2026-87195

A security component vulnerability in Oracle Hyperion Financial Management version 11.2.26.0.000 allows an unauthenticated attacker with network access via TLS to compromise the product. The attack complexity is rated high (difficult to exploit). Successful exploitation results in high confidenti...

CVE-2026-87211

CVE-2026-87211 affects the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data or complete access to all data accessible by the produ...

CVE-2026-87212

Oracle Hyperion Financial Management version 11.2.26.0.000 is affected by a vulnerability in its Security component, exploitable over the network via SQL by an unauthenticated attacker. The vulnerability is rated difficult to exploit (high attack complexity) but, when successful, allows unauthori...

CVE-2026-87225

Oracle Hyperion Financial Management (component: Security , version 11.2.26.0.000 ) has an easily exploitable vulnerability allowing a low-privileged attacker with network access via HTTP to compromise the product. Successful exploitation can result in unauthorized access to critical data (high c...

CVE-2026-87234

Oracle Hyperion Financial Management version 11.2.26.0.000 contains a vulnerability in its Security component. A low-privileged attacker with network access via HTTP can exploit this without user interaction to gain unauthorized creation, deletion, or modification of critical data and unauthorize...

CVE-2026-87239

A vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000 allows a high-privileged attacker with network access via HTTP to take over the application. The CVSS 3.1 base score is 7.2 (High) , with full impact on confidentiality, integrity, and availabi...

CVE-2026-87245

Oracle Hyperion Financial Management version 11.2.26.0.000 is affected by a vulnerability in the Security component. An attacker with low privileges and access to the adjacent physical communication segment can exploit this with low complexity and no user interaction to achieve full takeover (hig...

CVE-2026-87248

A vulnerability in Oracle Hyperion Financial Management (component: Security ), affecting supported version 11.2.26.0.000 , allows a high-privileged attacker with local logon to the hosting infrastructure to compromise the application, resulting in a takeover with high impact on confidentiality, ...

CVE-2026-70819

Oracle Hyperion Financial Management 11.2.25.0.000 has a HIGH-severity SQL-based security flaw exploitable by a low-privileged network attacker, enabling full system compromise (C/I/A all high). No exploitation or patch details are provided; Oracle's August 2026 CPU is the referenced remediation ...

CVE-2026-71085

CVE-2026-71085 affects Oracle Hyperion Financial Management 11.2.25.0.000, specifically its Security component. A high-privileged attacker with network HTTP access can gain unauthorized read access to critical or all application data (CVSS 4.9, MEDIUM). No exploitation evidence is provided. Oracl...

CVE-2026-71145

The Security component of Oracle Hyperion Financial Management 11.2.25.0.000 is affected by a network-based vulnerability exploitable by a low-privileged attacker requiring human interaction, yielding unauthorized read/write access to some application data (CVSS 4.4 MEDIUM). Oracle's August 2026 ...

CVE-2026-87172

A critical vulnerability (CVSS 9.9) in the Security component of Oracle Hyperion Financial Management 11.2.26.0.000 allows a low-privileged attacker with network access via HTTP to achieve a full takeover of the product. The scope change (S:C) indicates that successful exploitation may also signi...

CVE-2026-87196

Oracle Hyperion Financial Management (component: Security ), version 11.2.26.0.000 , is affected by an easily exploitable vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation results in unauthorized access to critica...

CVE-2026-87214

CVE-2026-87214 affects Oracle Hyperion Financial Management (component: Security ), version 11.2.26.0.000 . A high-privileged attacker with network access via HTTP can exploit this low-complexity vulnerability to achieve full takeover of the product, with a scope change meaning the attack may sig...

CVE-2026-87243

Oracle Hyperion Financial Management (component: Security, version 11.2.26.0.000 ) is affected by a difficult-to-exploit vulnerability that allows an unauthenticated attacker with access to the adjacent physical communication segment to compromise the product. The vulnerability carries a scope ch...

CVE-2026-87244

Oracle Hyperion Financial Management (component: Security ) version 11.2.26.0.000 is affected by an easily exploitable vulnerability that allows a high-privileged attacker with network access via HTTP to achieve takeover of the product. The CVSS 3.1 base score is 7.2 (HIGH) , reflecting high impa...

CVE-2026-60391

An unauthenticated, network-accessible attacker can exploit Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) via HTTP to gain unauthorized access to critical data, with no user interaction required (CVSS 7.5, HIGH). No exploitation or patch details are provided in the documents.