CVE-2026-70847

Oracle HFM 11.2.25.0.000 Security component has a medium-severity local vulnerability (CVSS 6.5) allowing a low-privileged local attacker to access all HFM data. No root cause or patch details are provided in the documents; exploitation details are not available.

CVE-2026-70916

The Security component of Oracle Hyperion Financial Management version 11.2.25.0.000 is affected. An unauthenticated attacker with local infrastructure access can gain unauthorized read access to a subset of application data. CVSS 3.1 score 4.0 (Medium). Oracle's August 2026 CPU advisory is the p...

CVE-2026-71013

Oracle Hyperion Financial Management 11.2.25.0.000 has a Security component vulnerability exploitable locally by a high-privileged attacker, enabling unauthorized data creation, deletion, modification, and full data access (CVSS 6.0). No exploitation details are provided; see Oracle's August 2026...

CVE-2026-87220

Oracle Hyperion Financial Management (component: Security , version 11.2.26.0.000 ) is vulnerable to an unauthenticated attack from the adjacent network (physical communication segment) with low complexity and no user interaction required. Successful exploitation can cause a complete denial of se...

CVE-2026-87226

A high-severity vulnerability (CVSS 3.1: 8.8 ) in Oracle Hyperion Financial Management (component: Security ) allows a low-privileged attacker with network access via HTTP to compromise the product and achieve takeover . The only affected supported version is 11.2.26.0.000 . The root cause is not...

CVE-2026-70832

CVE-2026-70832 affects the Security component of Oracle Hyperion Financial Management version 11.2.25.0.000 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data or complete access to all data accessible through the ...

CVE-2026-70838

Oracle Hyperion Financial Management version 11.2.25.0.000 has a Security component flaw; a low-privileged local attacker can access critical data and modify some records. CVSS 6.1 (Medium). Oracle's August 2026 CPU advisory addresses this vulnerability.

CVE-2026-70841

The Oracle Security Alert (CSPAug2026) referenced in the documents is not publicly accessible, so no patch version or remediation guidance can be confirmed. Affected version 11.2.25.0.000 has CVSS 5.6; no exploit code is provided. Monitor Oracle advisory for patch details.

CVE-2026-87170

Oracle Hyperion Financial Management (component: Security , version 11.2.26.0.000 ) contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the application. Successful exploitation can result in unauthorized creation, deletio...

CVE-2026-70821

CVE-2026-70821 affects Oracle Hyperion Financial Management version 11.2.25.0.000 (Security component). A low-privileged attacker with network SQL access can achieve full compromise (CVSS 8.8). No patch version or exploit details are provided in the documents; see Oracle's August 2026 security al...

CVE-2026-70843

Oracle Hyperion Financial Management 11.2.25.0.000 Security component has a CVSS 6.8 medium-severity flaw exploitable by an unauthenticated attacker on the physical communication segment, enabling unauthorized creation, deletion, modification, and full read access to all application data. Oracle ...

CVE-2026-70849

Oracle Hyperion Financial Management (version 11.2.25.0.000 ) contains a vulnerability in its Security component. A high-privileged attacker with network access via HTTP can exploit this flaw to gain unauthorized access to critical data or cause a complete denial of service (hang or repeatable cr...

CVE-2026-71146

Oracle Hyperion Financial Management 11.2.25.0.000 Security component has a local DoS flaw (CVSS 1.9 LOW); high-privilege local attacker can cause partial service disruption. No exploitation observed; patch details not provided in documents.

CVE-2026-70825

CVE-2026-70825 affects Oracle Hyperion Financial Management version 11.2.25.0.000 (Security component). A low-privileged remote attacker can exploit it over HTTP to gain unauthorized access to critical data, scoring CVSS 6.5 (Medium). Oracle's August 2026 CPU advisory is referenced; no exploit co...

CVE-2026-70826

Oracle Hyperion Financial Management 11.2.25.0.000 has an easily exploitable security component flaw. A low-privileged attacker with network HTTP access can obtain unauthorized access to critical data. CVSS 3.1 score is 6.5 (MEDIUM), with high confidentiality impact. No exploits are currently kno...

CVE-2026-70851

Oracle Hyperion Financial Management 11.2.25.0.000 has a Security component flaw exploitable over HTTP by a low-privileged attacker, causing partial denial of service (CVSS 3.1 base score 3.1, LOW). No exploit code or in-the-wild exploitation is documented; refer to Oracle's CSPUAugust2026 adviso...

CVE-2026-71060

CVE-2026-71060 affects Oracle Hyperion Financial Management 11.2.25.0.000 (Security component). A high-privileged remote attacker via HTTP can gain unauthorized access to critical data. CVSS 4.4 MEDIUM. Patch details are not provided in the available documents; consult Oracle's August 2026 CPU ad...