CVE-2020-11023

The connected Astra Linux bulletin confirms CVE-2020-11023: in jQuery versions >= 1.0.3 and < 3.5.0, passing HTML containing elements from untrusted sources to DOM manipulation methods (e.g., .html(), .append()) may lead to untrusted code execution. Patch released in jQuery 3.5.0. Remediat...

CVE-2019-17566

CVE-2019-17566 (Apache Batik) is a server-side request forgery caused by improper input validation in xlink:href attributes, potentially allowing an attacker to trigger arbitrary GET requests from the vulnerable server. Connected advisories reference Batik-related SSRF issues across IBM JRS, SUSE...

CVE-2021-27807

CVE-2021-27807 affects Apache PDFBox 2.0.22 and earlier 2.0.x. The issue arises when loading a crafted PDF, triggering an infinite loop and causing denial of service. Connected IBM advisories confirm the same description and map remediation to upgrading to fixed PDFBox versions via product-specif...

CVE-2021-27906

CVE-2021-27906 affects Apache PDFBox; a crafted PDF can trigger an OutOfMemoryError when loading, impacting PDFBox 2.0.22 and earlier 2.0.x. The connected IBM/QRadar security bulletin confirms the same CVE ID and notes remediation: upgrade to IBM Cognos-related 2.0.6.12, then apply FixPack 2.0.6....

CVE-2019-0228

CVE-2019-0228 affects Apache PDFBox 2.0.14, enabling an XML External Entity (XXE) attack via crafted XFDF. IBM advisories fix the vulnerability by upgrading IBM Operations Analytics - Log Analysis to version 1.3.7 (PDFBox handling) and Fedora advisories show a PDFBox update to 2.0.16. The vulnera...

CVE-2021-35665

Oracle Hyperion Financial Reporting (Repository component) is affected in version 11.2.6.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product, with user interaction required, potentially leading to unauthorized update/insert/delete and rea...

CVE-2017-10358

CVE-2017-10358 affects Oracle Hyperion Financial Reporting, subcomponent Workspace, with vulnerable version 11.1.2. The vulnerability allows a low-privilege, network-access attacker (HTTP) to read, update, insert, or delete data in Oracle Hyperion Financial Reporting, potentially impacting additi...

CVE-2019-2959

CVE-2019-2959 affects Oracle Hyperion Financial Reporting (11.1.2.4) within the Security Models component. Red Hat’s advisory mirrors the description: a remote, HTTP-exposed vulnerability that can be exploited by a high-privilege attacker and requires user interaction. Successful exploitation cou...

CVE-2017-10310

CVE-2017-10310 affects Oracle Hyperion Financial Reporting, subcomponent Security Models, with the affected product/version: Oracle Hyperion Financial Reporting (11.1.2). The vulnerability is exploitable by an unauthenticated attacker over HTTP with network access, enabling unauthorized access to...

CVE-2020-2769

CVE-2020-2769 affects Oracle Hyperion Financial Reporting, specifically the Web Based Report Designer, with affected version 11.1.2.4. The vulnerability can be exploited by a high-privilege attacker over a network via HTTP and requires user interaction. Successful exploitation could result in una...

CVE-2018-2907

The CVE-2018-2907 entry concerns Oracle Hyperion’s Hyperion Financial Reporting component (subcomponent: Security Models). Affected product: Hyperion Financial Reporting version 11.1.2. The vulnerability description states an unauthenticated, network-accessible issue over HTTP that could allow ac...

CVE-2016-3493

The CVE-2016-3493 issue affects Oracle Hyperion Financial Reporting (11.1.2.4), with vulnerability in the Security Models subcomponent of Hyperion’s Financial Reporting. Connected documents indicate a remote attacker could affect confidentiality, integrity, and availability, indicating a high-imp...

CVE-2025-50108

The CVE-2025-50108 entry concerns Oracle Hyperion Financial Reporting (Workspace component) with affected version 11.2.20.0.000. A vulnerability exists in the Workspace area that can be exploited by a low-privileged attacker over HTTP with network access; exploitation requires user interaction. S...

CVE-2026-70751

Oracle Hyperion Financial Reporting (Server component), version 11.2.25.0.000 , is affected by a vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the system. Exploitation is rated as difficult (high complexity) and requires user interaction from a p...

CVE-2026-70749

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) has a HIGH-severity (CVSS 8.1) unauthenticated remote vulnerability exploitable via HTTP. A network-accessible attacker can compromise the product, with full confidentiality, integrity, and availability impact. No specific root ca...

CVE-2026-70741

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) has a CVSS 9.1 critical flaw exploitable via unauthenticated RMI access, allowing full data read/write compromise. Oracle's August 2026 CPU advisory likely contains remediation details. No exploit code or in-the-wild exploitation ...

CVE-2026-70739

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) has a critical CVSS 9.8 flaw: an unauthenticated remote attacker via HTTP can fully compromise the application (confidentiality, integrity, availability). No root cause or patch version is specified in the provided documents; Orac...

CVE-2026-70744

Oracle Hyperion Financial Reporting 11.2.25.0.000 Server component has a HIGH severity (CVSS 8.1) unauthenticated remote vulnerability exploitable via HTTP, potentially leading to full product compromise; no exploit or in-the-wild activity details are provided in the documents.

CVE-2026-70752

Oracle Hyperion Financial Reporting Server (v11.2.25.0.000) is vulnerable to an unauthenticated, network-based HTTP attack (CVSS 7.5 HIGH) that can expose critical or all accessible product data. Exploitation details are not provided; remediation guidance is in Oracle's August 2026 security alert...

CVE-2026-70789

Oracle Hyperion Financial Reporting Server (v11.2.25.0.000) is exploitable via HTTP by an unauthenticated attacker requiring human interaction (CVSS 5.9). Oracle's CSA bulletin for August 2026 covers the patch. No exploit code or in-the-wild activity is reported in the provided documents.

CVE-2026-70745

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) contains an unauthenticated, remotely exploitable flaw allowing full system compromise via HTTP. CVSS 9.8 reflects complete confidentiality, integrity, and availability impact. Exploitation details are not provided; Oracle's Augus...

CVE-2026-70776

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) has a low-severity, hard-to-exploit integrity flaw exploitable via HTTP by a low-privileged attacker requiring human interaction. Impact is limited to unauthorized update/insert/delete of some accessible data; no exploit code is p...

CVE-2026-70780

Oracle Hyperion Financial Reporting Server (v11.2.25.0.000) has a MEDIUM-severity flaw exploitable by an unauthenticated attacker on the physical network segment, enabling unauthorized read/write access to critical data. No patch version or workaround is specified in the provided documents. Monit...

CVE-2026-70765

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) is vulnerable to an unauthenticated, low-complexity HTTP attack requiring human interaction. CVSS 3.1 scores it 6.1 (Medium) with scope change, enabling unauthorized read and update/insert/delete access to some product data. Explo...

CVE-2026-70787

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) has an easily exploitable HTTP-based flaw allowing low-privilege network attackers to fully compromise the server (CVSS 8.8 HIGH, all CIA impacts). No in-the-wild exploitation is reported. Oracle's August 2026 security alert (http...

CVE-2026-70746

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) has a HIGH (CVSS 8.1) flaw exploitable via HTTP; an unauthenticated remote attacker can gain full read/write access to all accessible data. Oracle published patches in its August 2026 Critical Patch Update; apply immediately. No p...

CVE-2026-70750

Oracle Hyperion Financial Reporting Server (affected version 11.2.25.0.000) is vulnerable to local privilege escalation; a low-privileged attacker with system access can achieve full product takeover (C/I/A impact, CVSS 7.8 High). No exploitation details provided; refer to Oracle's August 2026 se...

CVE-2026-70793

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) has a network-accessible vulnerability exploitable by low-privileged attackers via HTTP, enabling unauthorized data read, insert, update, and delete. CVSS 3.1 scores 4.2 (Medium). No exploitation details or patches are provided in...

CVE-2026-70740

Oracle Hyperion Financial Reporting 11.2.25.0.000 Server component is critically vulnerable (CVSS 9.8) to unauthenticated remote HTTP attacks enabling full system compromise. No root cause or patch details are provided; see Oracle's August 2026 CPU advisory for remediation guidance.

CVE-2026-70742

Oracle Hyperion Financial Reporting Server component (version 11.2.25.0.000) has an easily exploitable flaw exploitable over HTTPS by a low-privilege attacker, enabling full product takeover with HIGH confidentiality, integrity, and availability impact (CVSS 8.8). No in-the-wild exploitation data...

CVE-2026-70753

A low-privileged, network-accessible attacker can exploit a flaw in the Server component of Oracle Hyperion Financial Reporting 11.2.25.0.000 via HTTP, requiring only user interaction, to read all accessible data and perform limited unauthorized updates. Oracle's August 2026 security advisory is ...

CVE-2026-70754

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) is affected by an easily exploitable, unauthenticated HTTP-based vulnerability allowing unauthorized read access to a subset of accessible data; CVSS 3.1 Base Score 5.3 (MEDIUM). Oracle's August 2026 Critical Patch Update addresse...

CVE-2026-70766

An unauthenticated attacker can exploit the Server component of Oracle Hyperion Financial Reporting 11.2.25.0.000 via HTTP to gain unauthorized read and limited write/delete access to application data, requiring human interaction to succeed. Oracle's August 2026 security advisory is the primary r...

CVE-2026-70784

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) has a medium-severity (CVSS 5.3) local vulnerability requiring high complexity and low privileges, allowing unauthorized data modification and partial read access. No exploitation or patch details are provided; monitoring Oracle's...

CVE-2026-70788

Oracle Hyperion Financial Reporting Server 11.2.25.0.000 has an unauthenticated, easily exploitable HTTP vulnerability (CVSS 6.5) allowing unauthorized read, insert, update, and delete access to data. No exploitation details are provided in the documents. Patch guidance: https://www.oracle.com/se...

CVE-2026-70758

Oracle Hyperion Financial Reporting Server (v11.2.25.0.000) has a local privilege escalation vulnerability requiring low-privileged infrastructure access; successful exploitation allows unauthorized data creation, deletion, modification, and limited read access. Oracle's August 2026 CPU patch adv...

CVE-2026-70759

Oracle Hyperion Financial Reporting Server (affected version 11.2.25.0.000) has a medium-severity (CVSS 5.4) flaw exploitable via unauthenticated HTTP access, requiring user interaction, enabling unauthorized read, update, insert, and delete access to accessible data. Oracle's August 2026 securit...

CVE-2026-70785

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) has a low-severity vulnerability exploitable via HTTP by an unauthenticated network attacker with high attack complexity, enabling unauthorized read access to a subset of application data. No exploitation evidence or patch details...

CVE-2026-70769

Oracle Hyperion Financial Reporting Server component (version 11.2.25.0.000) has a medium-severity (CVSS 6.5) vulnerability exploitable via unauthenticated HTTP network access. Successful attacks grant unauthorized access to critical data and limited unauthorized update, insert, or delete operati...

CVE-2026-70794

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) contains a local integrity vulnerability; a low-privileged local attacker can modify or delete critical data. CVSS 3.1 scores 4.7 (Medium). Exploitation requires local infrastructure access; no exploit details are provided. Apply ...

CVE-2026-70767

Oracle Hyperion Financial Reporting Server version 11.2.25.0.000 has an easily exploitable flaw allowing a low-privileged network attacker via HTTP to gain unauthorized access to critical or all product data (CVSS 6.5, confidentiality-only impact). No root cause or in-the-wild exploitation detail...

CVE-2026-70768

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) has a medium-severity (CVSS 6.1) HTTP-based vulnerability exploitable by unauthenticated attackers, enabling unauthorized read/write access to data with scope change; no exploitation details are provided. Oracle's August 2026 CPU ...