Oracle Hyperion Financial Management vulnerabilities
73 known CVE vulnerabilities in Oracle Hyperion Financial Management, translated and rated.
- CVE-2026-70851Low
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A low-privileged attacker with network access via HTTP can exploit this to cause partial denial of service. CVSS 3.1: 3.1 (Availability impact).
- CVE-2026-70850Low
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A high-privileged attacker with local access can exploit this to perform unauthorized update, insert, or delete of data and cause partial denial of service. CVSS 3.1: 3.0 (Integrity and Availability impact).
- CVE-2026-70849Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A high-privileged attacker over the network (HTTP) can gain complete access to data and cause a complete denial of service (DoS).
- CVE-2026-70848Low
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An unauthenticated attacker with network access via HTTP can exploit this to gain unauthorized read access to a subset of data. CVSS 3.1: 3.7 (Confidentiality impact).
- CVE-2026-70847Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A low-privileged attacker with local access can gain complete access to data, with impact on other products.
- CVE-2026-70843Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A difficult-to-exploit flaw allows an unauthenticated attacker with access to the physical communication segment to compromise confidentiality and integrity. Successful attacks can result in unauthorized creation, deletion, or modification of data, as well as unauthorized access to data.
- CVE-2026-70842High
Vulnerability in Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). Affects version 11.2.25.0.000. A low-privileged attacker with logon to the infrastructure can easily compromise the system. Attacks may significantly impact additional products (scope change). Successful attacks may result in unauthorized creation, deletion, or modification of critical data and unauthorized access to all system data.
- CVE-2026-70841Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A difficult-to-exploit flaw allows a low-privileged attacker with logon access to compromise data confidentiality. Attacks may impact additional products (scope change) and lead to unauthorized access to data.
- CVE-2026-70840High
Vulnerability in Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). Affects version 11.2.25.0.000. A low-privileged attacker with logon to the infrastructure can easily compromise the system. Attacks may significantly impact additional products (scope change). Successful attacks may result in unauthorized creation, deletion, or modification of critical data and unauthorized access to all system data.
- CVE-2026-70838Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with logon access to compromise confidentiality and integrity. Attacks can result in unauthorized access to data and unauthorized modification of some data.
- CVE-2026-70836Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with logon access to compromise data confidentiality. Attacks can result in unauthorized access to data.
- CVE-2026-70834High
Vulnerability in Oracle Hyperion Financial Management (component: Security). Affects version 11.2.25.0.000. A high-privileged attacker can take over the system via HTTP, resulting in full compromise of confidentiality, integrity, and availability.
- CVE-2026-70832High
Vulnerability in Oracle Hyperion Financial Management (component: Security). Affects version 11.2.25.0.000. An unauthenticated attacker can gain full access to data, including critical data, via HTTP.
- CVE-2026-70831Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise data confidentiality. Attacks can result in unauthorized access to data.
- CVE-2026-70828High
Vulnerability in Oracle Hyperion Financial Management (component: Security). Affects version 11.2.25.0.000. A low-privileged attacker can gain full access to data via HTTP, and attacks may impact additional products (scope change).
- CVE-2026-70826Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise data confidentiality. Attacks can result in unauthorized access to data.
- CVE-2026-70825Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise data confidentiality. Attacks can result in unauthorized access to data.
- CVE-2026-70824Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise data confidentiality. Attacks can result in unauthorized access to data.
- CVE-2026-70823High
Vulnerability in Oracle Hyperion Financial Management (component: Security). Affects version 11.2.25.0.000. An unauthenticated attacker can, under difficult conditions, gain full access to data and modify, create, or delete it via HTTPS.
- CVE-2026-70822High
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Easily exploitable by unauthenticated attacker via HTTP, allowing unauthorized access to critical data or complete access to all data.
- CVE-2026-70821High
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Easily exploitable by low-privileged attacker via SQL, allowing takeover of the system.
- CVE-2026-70819High
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Easily exploitable by low-privileged attacker via SQL, allowing takeover of the system.
- CVE-2026-70818High
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Easily exploitable by low-privileged attacker via SQL, allowing takeover of the system.

