Oracle Hyperion Financial Management vulnerabilities

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. A difficult-to-exploit vulnerability allows an unauthenticated attacker to remotely (HTTP) gain unauthorized access to critical data and ability to create, delete, or modify them.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via SQL to compromise data confidentiality and integrity. Successful attacks can result in unauthorized creation, deletion, or modification of data and unauthorized access to data.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. An easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data. Successful attacks can lead to complete disclosure of data accessible in the system.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. An easily exploitable flaw allows an unauthenticated attacker with physical access to the communication segment to compromise data confidentiality, integrity, and availability. Attacks can lead to unauthorized creation, deletion, modification, access to data, and partial denial of service.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data and cause partial denial of service. Attacks can lead to data disclosure and reduced system availability.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data and perform unauthorized update, insert, or delete on some data. Attacks can lead to confidentiality and integrity breaches.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. An easily exploitable flaw allows a high-privileged attacker with network access via SQL to completely take over the system. Attacks can lead to full compromise of confidentiality, integrity, and availability.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to compromise data integrity and confidentiality. Attacks can lead to unauthorized creation, deletion, modification, and access to data.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. An easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data. Successful attacks can lead to complete disclosure of data accessible in the system.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to completely take over the system. Attacks can lead to full compromise of confidentiality, integrity, and availability.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to completely take over the system. Attacks can lead to full compromise of confidentiality, integrity, and availability.

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. A low-privileged authenticated attacker with network access via SQL can take over the application. CVSS 3.1 Base Score 8.8.

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. A low-privileged authenticated attacker with network access via HTTP can take over the application. CVSS 3.1 Base Score 8.8.

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. An unauthenticated attacker with network access via HTTP can modify or delete critical data and cause a partial denial of service. CVSS 3.1 Base Score 8.2.

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. An unauthenticated attacker with network access via HTTP can cause a hang or frequently repeatable crash (complete DoS). CVSS 3.1 Base Score 7.5.

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. A difficult-to-exploit unauthenticated attack via HTTP can allow modification and unauthorized access to critical data. CVSS 3.1 Base Score 7.4.

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. An unauthenticated attacker with network access via HTTP can access critical data and modify some data. CVSS 3.1 Base Score 8.2.

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. An unauthenticated attacker with network access via HTTP can access critical data and modify some data. CVSS 3.1 Base Score 8.2.

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. A difficult-to-exploit unauthenticated attack via TLS can allow modification and unauthorized access to critical data. CVSS 3.1 Base Score 7.4.

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. An unauthenticated attacker with network access via HTTP can access critical data. CVSS 3.1 Base Score 7.5.

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. An unauthenticated attacker with network access via HTTP can access critical data. CVSS 3.1 Base Score 7.5.

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. A low privileged attacker with network access via HTTP can gain unauthorized access to critical data or all accessible data and cause a partial denial of service (partial DoS).

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. A low privileged attacker with network access via HTTP can gain unauthorized access to critical data or all accessible data and cause a partial denial of service (partial DoS).

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. A difficult to exploit vulnerability allows a low privileged attacker with network access via HTTP to take over Oracle Hyperion Financial Management.

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. An unauthenticated attacker with access to the physical communication segment attached to the hardware running the system can take over Oracle Hyperion Financial Management.

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. A low privileged attacker with network access via HTTP can take over Oracle Hyperion Financial Management.

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. A high privileged attacker with logon to the infrastructure running the system can take over Oracle Hyperion Financial Management; the attack requires human interaction and may significantly impact additional products (scope change).

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. A low privileged attacker with logon to the infrastructure running the system can take over Oracle Hyperion Financial Management; the attack may significantly impact additional products (scope change).

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. A low privileged attacker with network access via HTTP can take over Oracle Hyperion Financial Management.

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. A low privileged attacker with network access via HTTP can take over Oracle Hyperion Financial Management.

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. A low privileged attacker with network access via HTTP can take over Oracle Hyperion Financial Management.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. A high-privileged attacker with network access via SQL can easily exploit this flaw. Successful attacks can result in unauthorized creation, deletion, or modification of data and unauthorized access to data, and may impact additional products (scope change).

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. A low-privileged attacker with network access via HTTP can easily exploit this flaw. Successful attacks can result in unauthorized access to data and unauthorized update, insert, or delete of data, and may impact additional products (scope change).

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. An unauthenticated attacker with network access via TCP can easily exploit this flaw. Successful attacks can result in unauthorized access to data and unauthorized update, insert, or delete of data.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTPS to compromise the system. Successful attacks can result in unauthorized creation, deletion, or modification of data and unauthorized access to data, and may impact additional products (scope change).

Vulnerability in Oracle Hyperion Financial Management product (component: Security) version 11.2.25.0.000. Easily exploitable by low-privileged attacker via HTTP. Successful attacks can result in takeover of Oracle Hyperion Financial Management. CVSS 8.8.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Difficult to exploit by low-privileged attacker with logon to infrastructure, requires human interaction. Allows unauthorized update, insert or delete of some data, unauthorized read access to a subset of data, and partial denial of service. CVSS score 4.2.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Easily exploitable by unauthenticated attacker via HTTP, allows unauthorized read access to a subset of data. CVSS score 5.3.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Difficult to exploit, requires user interaction and network access via HTTP. Allows an unauthenticated attacker to perform unauthorized data modification and cause partial denial of service.

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure to compromise Oracle Hyperion Financial Management. Successful attacks can result in unauthorized ability to cause a partial denial of service (partial DOS). CVSS 3.1 Base Score 1.9 (Availability impacts).

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Difficult to exploit, requires user interaction and network access via HTTP. Allows a low-privileged attacker to perform unauthorized modification and read of some data, and may impact additional products (scope change).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure to compromise Oracle Hyperion Financial Management. Successful attacks can result in unauthorized update, insert or delete access to some data as well as unauthorized read access to a subset of data. CVSS 3.1 Base Score 3.0 (Confidentiality and Integrity impacts).

Vulnerability in Oracle Hyperion Financial Management (Security) in version 11.2.25.0.000. An unauthenticated attacker via HTTP, with user interaction, can gain unauthorized read and modify access to some data.

Vulnerability in Oracle Hyperion Financial Management (Security) in version 11.2.25.0.000. An unauthenticated attacker via HTTP can modify data and cause partial denial of service.

Vulnerability in Oracle Hyperion Financial Management (Security) in version 11.2.25.0.000. A low-privileged attacker, under difficult conditions, can cause a complete denial of service (hang or frequent crashes).

Vulnerability in Oracle Hyperion Financial Management (Security) in version 11.2.25.0.000. A high-privileged attacker with local access can fully compromise the system.

Vulnerability in Oracle Hyperion Financial Management (Security) in version 11.2.25.0.000. An unauthenticated attacker via HTTP, under difficult conditions, can gain unauthorized read and modify access to some data.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A high-privileged attacker with local access can exploit this, potentially leading to takeover of the system.

Vulnerability in Oracle Hyperion Financial Management (Security) in version 11.2.25.0.000. A high-privileged attacker with local access can fully compromise the system.

Vulnerability in Oracle Hyperion Financial Management (Security) in version 11.2.25.0.000. A low-privileged attacker, under difficult conditions, can access critical data or all system data.