CVE-2026-87214

CVE-2026-87214 affects Oracle Hyperion Financial Management (component: Security ), version 11.2.26.0.000 . A high-privileged attacker with network access via HTTP can exploit this low-complexity vulnerability to achieve full takeover of the product, with a scope change meaning the attack may sig...

CVE-2026-87241

A security vulnerability in Oracle Hyperion Financial Management (component: Security , version 11.2.26.0.000 ) allows an unauthenticated attacker with access to the physical communication segment to compromise the product. Successful exploitation can lead to unauthorized creation, deletion, or m...

CVE-2026-87243

Oracle Hyperion Financial Management (component: Security, version 11.2.26.0.000 ) is affected by a difficult-to-exploit vulnerability that allows an unauthenticated attacker with access to the adjacent physical communication segment to compromise the product. The vulnerability carries a scope ch...

CVE-2026-87244

Oracle Hyperion Financial Management (component: Security ) version 11.2.26.0.000 is affected by an easily exploitable vulnerability that allows a high-privileged attacker with network access via HTTP to achieve takeover of the product. The CVSS 3.1 base score is 7.2 (HIGH) , reflecting high impa...

CVE-2026-60391

An unauthenticated, network-accessible attacker can exploit Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) via HTTP to gain unauthorized access to critical data, with no user interaction required (CVSS 7.5, HIGH). No exploitation or patch details are provided in the documents.

CVE-2026-70818

Oracle Hyperion Financial Management version 11.2.25.0.000 contains a HIGH-severity (CVSS 8.8) SQL-based Security component flaw. A low-privileged, network-accessible attacker can exploit it to fully compromise CIA triad — leading to application takeover. No exploitation evidence or patch details...

CVE-2026-70822

CVE-2026-70822 affects the Security component of Oracle Hyperion Financial Management version 11.2.25.0.000 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data or complete access to all data accessible through the ...

CVE-2026-70937

A HIGH-severity flaw in Oracle Hyperion Financial Management 11.2.25.0.000 Security component allows a low-privileged, network-authenticated attacker via HTTP to achieve full product compromise (confidentiality, integrity, availability). No exploitation evidence is provided; Oracle's August 2026 ...

CVE-2026-70960

Oracle Hyperion Financial Management 11.2.25.0.000 has a HIGH-severity (CVSS 7.6) Security component flaw exploitable over HTTP by a low-privileged attacker, enabling unauthorized data access and modification with scope change. Oracle's August 2026 CPU patch is the remediation. No in-the-wild exp...

CVE-2026-70969

A medium-severity (CVSS 6.5) confidentiality flaw in Oracle Hyperion Financial Management's Security component, version 11.2.25.0.000, allows a low-privileged, network-authenticated attacker via HTTP to access all product data. No exploitation evidence or patch details are provided; Oracle's Augu...

CVE-2026-71105

A local, low-privileged attacker can cause a denial-of-service (hang/crash) in Oracle Hyperion Financial Management v11.2.25.0.000 via the Security component; Oracle's August 2026 CPU patch addresses it. Exploitation details are not provided in the documents.

CVE-2026-71118

Oracle Hyperion Financial Management (component: Security , version 11.2.25.0.000 ) is affected by a vulnerability exploitable by an unauthenticated attacker over the network via HTTP . The attack complexity is rated high , making exploitation difficult. Successful exploitation allows an attacker...

CVE-2026-87179

CVE-2026-87179 affects the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000 . The vulnerability is easily exploitable by a low-privileged attacker with network access via HTTP , requiring no user interaction. Successful exploitation can lead to full takeover of the...

CVE-2026-87191

This vulnerability affects the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000 . A low-privileged attacker with network access via HTTP can exploit it with low complexity and no user interaction. Successful exploitation results in unauthorized access to critical o...

CVE-2026-87199

CVE-2026-87199 affects Oracle Hyperion Financial Management version 11.2.26.0.000 in the Security component. An unauthenticated attacker with network access via HTTP can trigger a complete denial-of-service (hang or repeatable crash) of the product. The vulnerability is rated CVSS 3.1 Base 7.5 (H...

CVE-2026-87200

Oracle Hyperion Financial Management (component: Security ), version 11.2.26.0.000 , is vulnerable to an easily exploitable flaw that allows an unauthenticated attacker with network access via HTTP to compromise the application. Successful exploitation can lead to unauthorized creation, deletion,...

CVE-2026-87206

Oracle Hyperion Financial Management (component: Security ) is affected in version 11.2.26.0.000 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation results in unauthorized creation, deletion, or...

CVE-2026-87209

CVE-2026-87209 affects the Security component of Oracle Hyperion Financial Management , version 11.2.26.0.000 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity to gain unauthorized access to critical or all accessible data (high confidenti...

CVE-2026-87222

Oracle Hyperion Financial Management (component: Security ), version 11.2.26.0.000 , is affected by an easily exploitable vulnerability that allows an unauthenticated attacker with network access via HTTP to cause a complete denial of service (hang or frequently repeatable crash) of the applicati...

CVE-2026-87233

Oracle Hyperion Financial Management (component: Security ) version 11.2.26.0.000 is affected by an easily exploitable vulnerability that allows a high-privileged attacker with network access via HTTP to compromise the system. The vulnerability carries a scope change , meaning attacks may signifi...

CVE-2026-87242

Oracle Hyperion Financial Management 11.2.26.0.000 is affected by a vulnerability in the Security component. An unauthenticated attacker with network access via TLS can exploit this, though exploitation is rated as difficult (high attack complexity). Successful exploitation allows unauthorized cr...

CVE-2026-87246

Oracle Hyperion Financial Management (version 11.2.26.0.000 ) contains a vulnerability in the Security component. A high-privileged attacker with network access via HTTP can exploit it with low complexity and no user interaction, resulting in full takeover of the product (high impact to confident...

CVE-2026-70834

Oracle's August 2026 CPU advisory (cspuaug2026.html) patches CVE-2026-70834, a HIGH-severity (CVSS 7.2) flaw in the Security component of Oracle Hyperion Financial Management 11.2.25.0.000, exploitable over HTTP by a high-privileged attacker to compromise the application. No exploit code or in-th...

CVE-2026-70975

Oracle's August 2026 Critical Patch Update (referenced in the advisory) provides the fix. Affected version is HFM 11.2.25.0.000; organizations should apply the CSP patch immediately to prevent unauthorized data exposure.

CVE-2026-71091

Oracle Hyperion Financial Management 11.2.25.0.000 has an easily exploitable SQL-based vulnerability in the Security component, allowing a high-privileged remote attacker to achieve unauthorized read and write access to critical data (CVSS 6.5, Medium). No patch version or remediation is specifie...

CVE-2026-71120

A denial-of-service flaw in Oracle Hyperion Financial Management 11.2.25.0.000's Security component allows a low-privileged attacker to crash the application remotely via HTTP. CVSS 5.3 MEDIUM. No patch version or exploit details are provided; Oracle's August 2026 CPU advisory is the reference. M...

CVE-2026-87193

CVE-2026-87193 affects the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction, resulting in unauthorized access to critical data or c...

CVE-2026-87197

CVE-2026-87197 affects Oracle Hyperion Financial Management version 11.2.26.0.000 (component: Security). An unauthenticated attacker with network access via HTTP can exploit this vulnerability with low complexity to gain high confidentiality impact (unauthorized access to critical or all accessib...

CVE-2026-87215

Oracle Hyperion Financial Management (version 11.2.26.0.000 ) is affected by a vulnerability in its Security component. An unauthenticated attacker with network access via TCP can trigger a complete denial of service —causing a hang or frequently repeatable crash—of the product. The CVSS 3.1 scor...

CVE-2026-87218

CVE-2026-87218 affects the Security component of Oracle Hyperion Financial Management (version 11.2.26.0.000). An unauthenticated attacker with adjacent network access (physical communication segment) can exploit this with low complexity and no user interaction. Successful exploitation allows una...

CVE-2026-87236

Oracle Hyperion Financial Management version 11.2.26.0.000 is affected by a vulnerability in its Security component. A low-privileged attacker with network access via HTTP can exploit this with low complexity and no user interaction to achieve unauthorized access to critical or all accessible dat...

CVE-2026-87247

Oracle Hyperion Financial Management (component: Security ), version 11.2.26.0.000 , is affected by a network-based vulnerability exploitable over HTTP by a low-privileged attacker . The vulnerability is rated difficult to exploit (high attack complexity) but allows a successful attacker to achie...

CVE-2026-71109

Oracle Hyperion Financial Management 11.2.25.0.000 Security component has an easily exploitable local vulnerability allowing high-privileged attackers with infrastructure access to fully compromise the product (CVSS 6.7). No exploitation details are provided. Patch status is not specified in the ...

CVE-2026-87198

CVE-2026-87198 affects the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability, though exploitation is rated as difficult . Successful exploitation allows unauthorized creation, ...

CVE-2026-87250

Oracle Hyperion Financial Management (component: Security ), version 11.2.26.0.000 , is affected by an easily exploitable vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the product. Successful exploitation requires human interaction from a person ot...

CVE-2026-70836

Oracle Hyperion Financial Management 11.2.25.0.000 contains a Security component flaw exploitable by a low-privileged local attacker (CVSS 5.5) to access all application data; no patch or exploit details are provided, so monitor Oracle's CSP advisory for remediation updates.

CVE-2026-70914

Oracle Hyperion Financial Management version 11.2.25.0.000 has a HIGH-severity (CVSS 7.0) vulnerability in its Security component. An unauthenticated attacker with infrastructure access can compromise the application, requiring human interaction, leading to full confidentiality, integrity, and av...

CVE-2026-70942

Oracle's August 2026 Critical Patch Update (referenced in the CVE) addresses CVE-2026-70942 in the Security component of HFM 11.2.25.0.000, a HIGH-severity issue exploitable by low-privileged network attackers with no user interaction. No exploitation details are provided; apply Oracle's August 2...

CVE-2026-87204

CVE-2026-87204 affects the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000 . An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise the product, potentially resulting in full takeover with high impact on con...

CVE-2026-87219

This vulnerability affects the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000 . A low-privileged attacker with local access to the infrastructure can exploit it without user interaction to gain unauthorized creation, deletion, modification, or read access to crit...

CVE-2026-87224

Oracle Hyperion Financial Management (component: Security ) in supported version 11.2.26.0.000 is affected by an easily exploitable vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the product. Successful exploitation results in a full takeover of Ora...

CVE-2026-87229

CVE-2026-87229 affects the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000 . An unauthenticated attacker with network access via HTTP can compromise the product, resulting in unauthorized creation, deletion, or modification of critical data as well as unauthorized...

CVE-2026-70743

Oracle Hyperion Financial Reporting Server version 11.2.25.0.000 has an unauthenticated network-exploitable flaw (CVSS 8.2) allowing attackers to access all product data and cause partial denial of service. Oracle's August 2026 CPU advisory likely contains remediation guidance. No exploit details...

CVE-2026-70824

Oracle Hyperion Financial Management (component: Security) is affected in version 11.2.25.0.000. A low-privileged network attacker can exploit it via HTTP to gain unauthorized read access to critical or all accessible data (CVSS 6.5, MEDIUM). No patch details, root cause, or in-the-wild exploitat...

CVE-2026-70840

A HIGH-severity (CVSS 8.4) flaw exists in Oracle Hyperion Financial Management's Security component, affecting version 11.2.25.0.000. An attacker with low privileges and local access can exploit it to gain unauthorized read/write access to all accessible HFM data, with scope extending beyond the ...

CVE-2026-70853

Oracle Hyperion Financial Management version 11.2.25.0.000 is affected in its Security component. A high-privileged attacker with network HTTP access can gain unauthorized read access to a subset of data and cause partial denial of service. CVSS 3.1 Base Score is 3.3 (LOW). No exploit code or in-...

CVE-2026-70938

CVE-2026-70938 affects Oracle Hyperion Financial Management version 11.2.25.0.000 in the Security component. A low-privileged attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data or complete access to all data accessible through the pro...

CVE-2026-87205

Oracle Hyperion Financial Management (component: Security ) version 11.2.26.0.000 is affected by an unauthenticated vulnerability exploitable over HTTP with low attack complexity. A successful attack results in high confidentiality impact — unauthorized access to critical data or complete access ...

CVE-2026-87210

Oracle Hyperion Financial Management (component: Security ), version 11.2.26.0.000 , is affected by an easily exploitable vulnerability allowing an unauthenticated attacker with access to the physical communication segment where the product executes to compromise it. Successful exploitation can r...

CVE-2026-70817

CVE-2026-70817 is a critical (CVSS 9.8) flaw in the Security component of Oracle Hyperion Financial Management 11.2.25.0.000. An unauthenticated remote attacker can exploit it over HTTP to fully compromise the application. No exploitation evidence or patch details are provided in the documents. O...