CVE-2026-87253

Oracle Agile PLM (component: Web Client , affected version 9.3.6 ) contains a vulnerability allowing an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation requires human interaction from a person other than the attacker and involves a scope ch...

CVE-2026-87252

CVE-2026-87252 affects Oracle Agile PLM (Oracle Supply Chain, component: Application Server ), version 9.3.6 . The vulnerability allows an unauthenticated attacker with access to the physical communication segment attached to the hardware where Agile PLM executes to compromise the application. It...

CVE-2026-87249

Oracle Hyperion Financial Management 11.2.26.0.000 (component: Security ) is affected by an easily exploitable vulnerability allowing an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation requires user interaction from a person other than the ...

CVE-2026-87248

A vulnerability in Oracle Hyperion Financial Management (component: Security ), affecting supported version 11.2.26.0.000 , allows a high-privileged attacker with local logon to the hosting infrastructure to compromise the application, resulting in a takeover with high impact on confidentiality, ...

CVE-2026-87247

Oracle Hyperion Financial Management (component: Security ), version 11.2.26.0.000 , is affected by a network-based vulnerability exploitable over HTTP by a low-privileged attacker . The vulnerability is rated difficult to exploit (high attack complexity) but allows a successful attacker to achie...

CVE-2026-87246

Oracle Hyperion Financial Management (version 11.2.26.0.000 ) contains a vulnerability in the Security component. A high-privileged attacker with network access via HTTP can exploit it with low complexity and no user interaction, resulting in full takeover of the product (high impact to confident...

CVE-2026-87245

Oracle Hyperion Financial Management version 11.2.26.0.000 is affected by a vulnerability in the Security component. An attacker with low privileges and access to the adjacent physical communication segment can exploit this with low complexity and no user interaction to achieve full takeover (hig...

CVE-2026-87243

Oracle Hyperion Financial Management (component: Security, version 11.2.26.0.000 ) is affected by a difficult-to-exploit vulnerability that allows an unauthenticated attacker with access to the adjacent physical communication segment to compromise the product. The vulnerability carries a scope ch...

CVE-2026-87244

Oracle Hyperion Financial Management (component: Security ) version 11.2.26.0.000 is affected by an easily exploitable vulnerability that allows a high-privileged attacker with network access via HTTP to achieve takeover of the product. The CVSS 3.1 base score is 7.2 (HIGH) , reflecting high impa...

CVE-2026-87242

Oracle Hyperion Financial Management 11.2.26.0.000 is affected by a vulnerability in the Security component. An unauthenticated attacker with network access via TLS can exploit this, though exploitation is rated as difficult (high attack complexity). Successful exploitation allows unauthorized cr...

CVE-2026-87241

A security vulnerability in Oracle Hyperion Financial Management (component: Security , version 11.2.26.0.000 ) allows an unauthenticated attacker with access to the physical communication segment to compromise the product. Successful exploitation can lead to unauthorized creation, deletion, or m...

CVE-2026-87240

CVE-2026-87240 affects Oracle Hyperion Financial Management version 11.2.26.0.000 in the Security component. A low-privileged attacker with local access to the infrastructure where the product executes can exploit this vulnerability with high complexity to achieve takeover of Oracle Hyperion Fina...

CVE-2026-87238

Oracle Hyperion Financial Management (component: Security ), version 11.2.26.0.000 , is affected by an easily exploitable vulnerability that allows a low-privileged attacker with network access via SQL to compromise the product. Successful exploitation can result in full takeover of the applicati...

CVE-2026-87237

This vulnerability affects the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000 . A low-privileged attacker with network access via HTTP can exploit it, though the attack is rated difficult to exploit (high complexity, no user interaction required). Successful expl...

CVE-2026-87239

A vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000 allows a high-privileged attacker with network access via HTTP to take over the application. The CVSS 3.1 base score is 7.2 (High) , with full impact on confidentiality, integrity, and availabi...

CVE-2026-87234

Oracle Hyperion Financial Management version 11.2.26.0.000 contains a vulnerability in its Security component. A low-privileged attacker with network access via HTTP can exploit this without user interaction to gain unauthorized creation, deletion, or modification of critical data and unauthorize...

CVE-2026-87235

Oracle Hyperion Financial Management (component: Security , version 11.2.26.0.000 ) is vulnerable to an unauthenticated network-based attack via SSH that is described as difficult to exploit. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data and...

CVE-2026-87236

Oracle Hyperion Financial Management version 11.2.26.0.000 is affected by a vulnerability in its Security component. A low-privileged attacker with network access via HTTP can exploit this with low complexity and no user interaction to achieve unauthorized access to critical or all accessible dat...

CVE-2026-87233

Oracle Hyperion Financial Management (component: Security ) version 11.2.26.0.000 is affected by an easily exploitable vulnerability that allows a high-privileged attacker with network access via HTTP to compromise the system. The vulnerability carries a scope change , meaning attacks may signifi...

CVE-2026-87230

CVE-2026-87230 affects the Security component of Oracle Hyperion Financial Management (version 11.2.26.0.000 ). An unauthenticated attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction. The scope is changed , meaning attacks may significa...