Oracle Hyperion Financial Management vulnerabilities

Vulnerability in Oracle Hyperion Financial Management (component: Security) affecting version 11.2.26.0.000. An easily exploitable flaw allows an unauthenticated attacker with HTTP network access to compromise the system, with attacks potentially impacting additional products (scope change). It can result in unauthorized creation, deletion, or modification of critical data as well as unauthorized access to it. CVSS 3.1 Base Score 10.0.

Vulnerability in Oracle Hyperion Financial Management (component: Security) affecting version 11.2.26.0.000. An easily exploitable flaw allows an unauthenticated attacker with HTTP network access to compromise the system, enabling unauthorized creation, deletion, or modification of critical data and causing a hang or frequently repeatable crash (complete DoS). CVSS 3.1 Base Score 9.1.

Vulnerability in Oracle Hyperion Financial Management (component: Security) affecting version 11.2.26.0.000. An easily exploitable flaw allows an unauthenticated attacker with HTTP network access to compromise the system, enabling unauthorized creation, deletion, or modification of critical data as well as unauthorized access to it. CVSS 3.1 Base Score 9.1.

Vulnerability in Oracle Hyperion Financial Management (component: Security) affecting version 11.2.26.0.000. An easily exploitable flaw allows a high-privileged attacker with HTTP network access to take over the system, with attacks potentially impacting additional products (scope change). CVSS 3.1 Base Score 9.1.

Vulnerability in Oracle Hyperion Financial Management (component: Security) affecting version 11.2.26.0.000. An easily exploitable flaw allows a high-privileged attacker with Oracle Net network access to take over the system, with attacks potentially impacting additional products (scope change). CVSS 3.1 Base Score 9.1.

Vulnerability in Oracle Hyperion Financial Management (component: Security) affecting version 11.2.26.0.000. An easily exploitable flaw allows an unauthenticated attacker with HTTP network access to fully take over the system. CVSS 3.1 Base Score 9.8.

Vulnerability in Oracle Hyperion Financial Management (component: Security) affecting version 11.2.26.0.000. An easily exploitable flaw allows an unauthenticated attacker with access to the physical communication segment attached to the hardware running the system to take it over, with attacks potentially impacting additional products (scope change). CVSS 3.1 Base Score 9.6.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. An unauthenticated attacker with network access via SQL can easily exploit it, leading to takeover of the system. CVSS 3.1 Base Score 9.8.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. An unauthenticated attacker with network access via TCP can easily exploit it, leading to unauthorized creation, deletion, or modification of data and unauthorized access to data. CVSS 3.1 Base Score 9.1.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. An unauthenticated attacker with network access via TCP can easily exploit it, leading to unauthorized creation, deletion, or modification of data and unauthorized access to data. CVSS 3.1 Base Score 9.1.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. An unauthenticated attacker with network access via TCP can easily exploit it, leading to unauthorized creation, deletion, or modification of data and unauthorized access to data. CVSS 3.1 Base Score 9.1.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. A low-privileged attacker with network access via HTTP can easily exploit it, leading to takeover of the system and potentially impacting other products (scope change). CVSS 3.1 Base Score 9.9.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. An unauthenticated attacker with network access via HTTP can easily exploit it, leading to unauthorized creation, deletion, or modification of data and unauthorized access to data. CVSS 3.1 Base Score 9.1.

Vulnerability in Oracle Hyperion Financial Management (component: Security) allows an unauthenticated attacker with network access via TLS to gain unauthorized access to data and modify it. The attack may impact additional products (scope change).

Vulnerability in Oracle Hyperion Financial Management (component: Security) allows a low privileged attacker with network access via SQL to compromise the system. The attack may impact additional products (scope change).

Vulnerability in Oracle Hyperion Financial Management product, component Security. Affected version is 11.2.25.0.000. An unauthenticated attacker can remotely modify data and cause a complete denial of service (DoS) via HTTP.

Vulnerability in Oracle Hyperion Financial Management product, component Security. Affected version is 11.2.25.0.000. An unauthenticated attacker can remotely compromise the system via HTTP.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000 allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data and modify it. Requires user interaction and may impact additional products (scope change).

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000 allows an unauthenticated attacker with network access via HTTP to gain unauthorized creation, deletion, or modification access to critical data and cause a partial denial of service (partial DoS). Requires user interaction.

Vulnerability in Oracle Hyperion Financial Management (Security component) version 11.2.26.0.000. A high-privileged attacker with local access can fully compromise the system.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000, difficult to exploit, allows a low-privileged attacker with network access via HTTP to take over Oracle Hyperion Financial Management. Impacts confidentiality, integrity, and availability.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000 allows a high-privileged attacker with network access via HTTP to take over Oracle Hyperion Financial Management. Impacts confidentiality, integrity, and availability.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000 allows a low-privileged attacker with access to the physical communication segment attached to the hardware running Oracle Hyperion Financial Management to take over the system. Impacts confidentiality, integrity, and availability.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000 allows a high-privileged attacker with network access via HTTP to take over Oracle Hyperion Financial Management. Impacts confidentiality, integrity, and availability.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000, difficult to exploit, allows an unauthenticated attacker with access to the physical communication segment attached to the hardware running Oracle Hyperion Financial Management to gain unauthorized creation, deletion, or modification access to critical data and unauthorized access to it. May impact additional products (scope change).

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. A difficult to exploit flaw allows an unauthenticated attacker with network access via TLS to compromise the system. Successful attacks can result in unauthorized creation, deletion or modification of critical data as well as unauthorized access to it.

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. An easily exploitable flaw allows an unauthenticated attacker with access to the physical communication segment attached to the hardware running the system to compromise it. Successful attacks can result in unauthorized creation, deletion or modification of critical data as well as unauthorized access to it.

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. A difficult to exploit flaw allows a low privileged attacker with logon to the infrastructure running the system to compromise it. Successful attacks can result in takeover of the system.

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. An easily exploitable flaw allows a high privileged attacker with network access via HTTP to compromise the system. Successful attacks can result in takeover of the system.

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. An easily exploitable flaw allows a low privileged attacker with network access via SQL to compromise the system. Successful attacks can result in takeover of the system.

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. A difficult to exploit flaw allows a low privileged attacker with network access via HTTP to compromise the system. Successful attacks can result in takeover of the system.

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. An easily exploitable flaw allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data and cause a partial denial of service. Successful attacks can result in confidentiality and availability impact.

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. A difficult to exploit flaw allows an unauthenticated attacker with network access via SSH to compromise the system. Successful attacks can result in unauthorized creation, deletion or modification of critical data as well as unauthorized access to it.

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. An easily exploitable flaw allows a low privileged attacker with network access via HTTP to perform unauthorized creation, deletion or modification of critical data as well as unauthorized access to it. Successful attacks can result in confidentiality and integrity impact.

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. An easily exploitable flaw allows a high privileged attacker with network access via HTTP to gain unauthorized access to critical data and cause a partial denial of service. Attacks may significantly impact additional products (scope change).

Vulnerability in Oracle Hyperion Financial Management (component: Security) affecting version 11.2.26.0.000. An easily exploitable flaw allows an unauthenticated attacker with access to the physical communication segment attached to the hardware running Oracle Hyperion Financial Management to compromise the system. Successful attacks can result in unauthorized creation, deletion or modification of critical data as well as full access to all accessible data.

Vulnerability in Oracle Hyperion Financial Management (component: Security) affecting version 11.2.26.0.000. A difficult to exploit flaw allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks can result in takeover of Oracle Hyperion Financial Management.

Vulnerability in Oracle Hyperion Financial Management (component: Security) affecting version 11.2.26.0.000. An easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks can result in unauthorized creation, deletion or modification of critical data as well as unauthorized read access to a subset of accessible data.

Vulnerability in Oracle Hyperion Financial Management (component: Security) affecting version 11.2.26.0.000. An easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks can result in unauthorized access to critical data as well as unauthorized update, insert or delete access to some accessible data.

Vulnerability in Oracle Hyperion Financial Management (component: Security) affecting version 11.2.26.0.000. An easily exploitable flaw allows a low privileged attacker with network access via HTTP to compromise the system. Successful attacks can result in takeover of Oracle Hyperion Financial Management.

Vulnerability in Oracle Hyperion Financial Management (component: Security) affecting version 11.2.26.0.000. An easily exploitable flaw allows a low privileged attacker with network access via HTTP to compromise the system. Successful attacks can result in takeover of Oracle Hyperion Financial Management.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. A low-privileged attacker can remotely (HTTP) gain unauthorized access to critical data or all accessible data and cause a partial denial of service.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. A low-privileged attacker can remotely (HTTP) take over the Oracle Hyperion Financial Management system.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. An unauthenticated attacker can remotely (HTTP) cause a hang or frequently repeatable crash (complete DoS).

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. An unauthenticated attacker can remotely (HTTP) gain unauthorized access to critical data or all accessible data.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. An unauthenticated attacker with access to the physical communication segment can cause complete DoS and unauthorized update, insert, or delete of some data.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. A low-privileged attacker with local access can impact additional products (scope change) and gain unauthorized access to critical data and ability to create, delete, or modify them.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. An unauthenticated attacker with access to the physical communication segment can gain unauthorized access to critical data (create, delete, modify) and cause complete DoS.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. A low-privileged attacker with local access can take over the Oracle Hyperion Financial Management system.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. An unauthenticated attacker can remotely (TCP) cause a hang or frequently repeatable crash (complete DoS).