Oracle Hyperion Financial Management vulnerabilities
73 known CVE vulnerabilities in Oracle Hyperion Financial Management, translated and rated.
- CVE-2026-70921Critical
Vulnerability in Oracle Hyperion Financial Management (component: Security) allows an unauthenticated attacker with network access via TLS to gain unauthorized access to data and modify it. The attack may impact additional products (scope change).
- CVE-2026-70920Critical
Vulnerability in Oracle Hyperion Financial Management (component: Security) allows a low privileged attacker with network access via SQL to compromise the system. The attack may impact additional products (scope change).
- CVE-2026-70854Critical
Vulnerability in Oracle Hyperion Financial Management product, component Security. Affected version is 11.2.25.0.000. An unauthenticated attacker can remotely modify data and cause a complete denial of service (DoS) via HTTP.
- CVE-2026-70817Critical
Vulnerability in Oracle Hyperion Financial Management product, component Security. Affected version is 11.2.25.0.000. An unauthenticated attacker can remotely compromise the system via HTTP.
- CVE-2026-71150High
Vulnerability in Oracle Hyperion Financial Management product (component: Security) version 11.2.25.0.000. Easily exploitable by low-privileged attacker via HTTP. Successful attacks can result in takeover of Oracle Hyperion Financial Management. CVSS 8.8.
- CVE-2026-71149Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Difficult to exploit by low-privileged attacker with logon to infrastructure, requires human interaction. Allows unauthorized update, insert or delete of some data, unauthorized read access to a subset of data, and partial denial of service. CVSS score 4.2.
- CVE-2026-71148Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Easily exploitable by unauthenticated attacker via HTTP, allows unauthorized read access to a subset of data. CVSS score 5.3.
- CVE-2026-71147Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Difficult to exploit, requires user interaction and network access via HTTP. Allows an unauthenticated attacker to perform unauthorized data modification and cause partial denial of service.
- CVE-2026-71146Low
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure to compromise Oracle Hyperion Financial Management. Successful attacks can result in unauthorized ability to cause a partial denial of service (partial DOS). CVSS 3.1 Base Score 1.9 (Availability impacts).
- CVE-2026-71145Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Difficult to exploit, requires user interaction and network access via HTTP. Allows a low-privileged attacker to perform unauthorized modification and read of some data, and may impact additional products (scope change).
- CVE-2026-71144Low
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure to compromise Oracle Hyperion Financial Management. Successful attacks can result in unauthorized update, insert or delete access to some data as well as unauthorized read access to a subset of data. CVSS 3.1 Base Score 3.0 (Confidentiality and Integrity impacts).
- CVE-2026-71123Medium
Vulnerability in Oracle Hyperion Financial Management (Security) in version 11.2.25.0.000. An unauthenticated attacker via HTTP, with user interaction, can gain unauthorized read and modify access to some data.
- CVE-2026-71121Medium
Vulnerability in Oracle Hyperion Financial Management (Security) in version 11.2.25.0.000. An unauthenticated attacker via HTTP can modify data and cause partial denial of service.
- CVE-2026-71120Medium
Vulnerability in Oracle Hyperion Financial Management (Security) in version 11.2.25.0.000. A low-privileged attacker, under difficult conditions, can cause a complete denial of service (hang or frequent crashes).
- CVE-2026-71119Medium
Vulnerability in Oracle Hyperion Financial Management (Security) in version 11.2.25.0.000. A high-privileged attacker with local access can fully compromise the system.
- CVE-2026-71118Medium
Vulnerability in Oracle Hyperion Financial Management (Security) in version 11.2.25.0.000. An unauthenticated attacker via HTTP, under difficult conditions, can gain unauthorized read and modify access to some data.
- CVE-2026-71117High
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A high-privileged attacker with local access can exploit this, potentially leading to takeover of the system.
- CVE-2026-71109Medium
Vulnerability in Oracle Hyperion Financial Management (Security) in version 11.2.25.0.000. A high-privileged attacker with local access can fully compromise the system.
- CVE-2026-71108Medium
Vulnerability in Oracle Hyperion Financial Management (Security) in version 11.2.25.0.000. A low-privileged attacker, under difficult conditions, can access critical data or all system data.
- CVE-2026-71105Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Difficult to exploit, requires local access and low privileges. Successful attack can cause a hang or frequent crashes (complete DoS).
- CVE-2026-71103Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Easily exploitable by low-privileged attacker over network (HTTP). Successful attack can allow unauthorized modification, read access, and partial denial of service.
- CVE-2026-71091Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Easily exploitable by high-privileged attacker over network (SQL). Successful attack can allow unauthorized creation, deletion, modification of data and full access to data.
- CVE-2026-71090Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Difficult to exploit by low-privileged attacker over network (HTTP). Successful attack can cause complete DoS, as well as unauthorized modification and read access to data.
- CVE-2026-71085Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Easily exploitable by high-privileged attacker over network (HTTP). Successful attack can allow full access to data.
- CVE-2026-71060Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A high-privileged attacker can remotely (HTTP) gain unauthorized access to critical data or all accessible data.
- CVE-2026-71013Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A high-privileged attacker with local access can create, delete, or modify critical data and gain unauthorized access to critical data or all accessible data.
- CVE-2026-70975Medium
Vulnerability in Oracle Hyperion Financial Management, Security component. Affects version 11.2.25.0.000. Easily exploitable, allows low-privileged attacker via HTTP to gain unauthorized access to critical data or complete access to all product data.
- CVE-2026-70974Medium
Vulnerability in Oracle Hyperion Financial Management, Security component. Affects version 11.2.25.0.000. Difficult to exploit, allows low-privileged attacker via HTTP to gain unauthorized access to critical data or complete access to all product data.
- CVE-2026-70969Medium
Vulnerability in Oracle Hyperion Financial Management, Security component. Affects version 11.2.25.0.000. Easily exploitable, allows low-privileged attacker via HTTP to gain unauthorized access to critical data or complete access to all product data.
- CVE-2026-70960High
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A low-privileged attacker with network access via HTTP, requiring user interaction, can gain unauthorized access to critical data and modify some data.
- CVE-2026-70952High
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data and cause a partial denial of service.
- CVE-2026-70940High
Vulnerability in Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). Affects version 11.2.25.0.000. A low-privileged attacker with network access via HTTP can take over Oracle Hyperion Financial Management.
- CVE-2026-70939High
Vulnerability in Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). Affects version 11.2.25.0.000. A high-privileged attacker with network access via HTTP can take over Oracle Hyperion Financial Management.
- CVE-2026-70938Medium
Vulnerability in Oracle Hyperion Financial Management, Security component. Affects version 11.2.25.0.000. Easily exploitable, allows low-privileged attacker via HTTP to gain unauthorized access to critical data or complete access to all product data.
- CVE-2026-70937High
Vulnerability in Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). Affects version 11.2.25.0.000. A low-privileged attacker with network access via HTTP can take over Oracle Hyperion Financial Management, but exploitation is difficult.
- CVE-2026-70936High
Vulnerability in Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). Affects version 11.2.25.0.000. A low-privileged attacker with local access can gain unauthorized access to critical data and modify or delete it.
- CVE-2026-70935High
Vulnerability in Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). Affects version 11.2.25.0.000. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and cause partial denial of service.
- CVE-2026-70934High
Vulnerability in Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). Affects version 11.2.25.0.000. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and cause partial denial of service.
- CVE-2026-70933High
Vulnerability in Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). Affects version 11.2.25.0.000. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and cause partial denial of service.
- CVE-2026-70929High
Vulnerability in Oracle Hyperion Financial Management (component: Security). Affects version 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management, leading to unauthorized creation, deletion, modification, or access to critical data.
- CVE-2026-70928High
Vulnerability in Oracle Hyperion Financial Management (component: Security). Affects version 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Oracle Hyperion Financial Management, resulting in takeover.
- CVE-2026-70925High
Vulnerability in Oracle Hyperion Financial Management (component: Security). Affects version 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Oracle Hyperion Financial Management, leading to unauthorized creation, deletion, modification, or access to critical data.
- CVE-2026-70919Low
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An unauthenticated attacker with local access can exploit this (requires user interaction) to perform unauthorized update, insert, or delete of data. CVSS 3.1: 2.5 (Integrity impact).
- CVE-2026-70917Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An unauthenticated attacker with local access to the infrastructure can gain unauthorized read access to a subset of data.
- CVE-2026-70916Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An unauthenticated attacker with local access to the infrastructure can gain unauthorized read access to a subset of data.
- CVE-2026-70914High
Vulnerability in Oracle Hyperion Financial Management (component: Security). Affects version 11.2.25.0.000. Difficult to exploit vulnerability requires logon to infrastructure and human interaction, but can result in takeover of Oracle Hyperion Financial Management.
- CVE-2026-70912Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A low-privileged attacker with local access, under difficult conditions and user interaction, can gain unauthorized creation, deletion, or modification of critical data, with impact on other products.
- CVE-2026-70911Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An unauthenticated attacker over the network (HTTP) can gain unauthorized read access to a subset of data.
- CVE-2026-70909High
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An unauthenticated attacker with network access via HTTP can compromise the product, leading to unauthorized access to critical data or all accessible data, and cause a partial denial of service.
- CVE-2026-70853Low
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A high-privileged attacker with network access via HTTP can exploit this to gain unauthorized read access and cause partial denial of service. CVSS 3.1: 3.3 (Confidentiality and Availability impact).

