Oracle Hyperion Financial Management vulnerabilities
154 known CVE vulnerabilities in Oracle Hyperion Financial Management, translated and rated.
- CVE-2026-71105Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Difficult to exploit, requires local access and low privileges. Successful attack can cause a hang or frequent crashes (complete DoS).
- CVE-2026-71103Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Easily exploitable by low-privileged attacker over network (HTTP). Successful attack can allow unauthorized modification, read access, and partial denial of service.
- CVE-2026-71091Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Easily exploitable by high-privileged attacker over network (SQL). Successful attack can allow unauthorized creation, deletion, modification of data and full access to data.
- CVE-2026-71090Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Difficult to exploit by low-privileged attacker over network (HTTP). Successful attack can cause complete DoS, as well as unauthorized modification and read access to data.
- CVE-2026-71085Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Easily exploitable by high-privileged attacker over network (HTTP). Successful attack can allow full access to data.
- CVE-2026-71060Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A high-privileged attacker can remotely (HTTP) gain unauthorized access to critical data or all accessible data.
- CVE-2026-71013Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A high-privileged attacker with local access can create, delete, or modify critical data and gain unauthorized access to critical data or all accessible data.
- CVE-2026-70975Medium
Vulnerability in Oracle Hyperion Financial Management, Security component. Affects version 11.2.25.0.000. Easily exploitable, allows low-privileged attacker via HTTP to gain unauthorized access to critical data or complete access to all product data.
- CVE-2026-70974Medium
Vulnerability in Oracle Hyperion Financial Management, Security component. Affects version 11.2.25.0.000. Difficult to exploit, allows low-privileged attacker via HTTP to gain unauthorized access to critical data or complete access to all product data.
- CVE-2026-70969Medium
Vulnerability in Oracle Hyperion Financial Management, Security component. Affects version 11.2.25.0.000. Easily exploitable, allows low-privileged attacker via HTTP to gain unauthorized access to critical data or complete access to all product data.
- CVE-2026-70960High
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A low-privileged attacker with network access via HTTP, requiring user interaction, can gain unauthorized access to critical data and modify some data.
- CVE-2026-70952High
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data and cause a partial denial of service.
- CVE-2026-70940High
Vulnerability in Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). Affects version 11.2.25.0.000. A low-privileged attacker with network access via HTTP can take over Oracle Hyperion Financial Management.
- CVE-2026-70939High
Vulnerability in Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). Affects version 11.2.25.0.000. A high-privileged attacker with network access via HTTP can take over Oracle Hyperion Financial Management.
- CVE-2026-70938Medium
Vulnerability in Oracle Hyperion Financial Management, Security component. Affects version 11.2.25.0.000. Easily exploitable, allows low-privileged attacker via HTTP to gain unauthorized access to critical data or complete access to all product data.
- CVE-2026-70937High
Vulnerability in Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). Affects version 11.2.25.0.000. A low-privileged attacker with network access via HTTP can take over Oracle Hyperion Financial Management, but exploitation is difficult.
- CVE-2026-70936High
Vulnerability in Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). Affects version 11.2.25.0.000. A low-privileged attacker with local access can gain unauthorized access to critical data and modify or delete it.
- CVE-2026-70935High
Vulnerability in Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). Affects version 11.2.25.0.000. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and cause partial denial of service.
- CVE-2026-70934High
Vulnerability in Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). Affects version 11.2.25.0.000. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and cause partial denial of service.
- CVE-2026-70933High
Vulnerability in Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). Affects version 11.2.25.0.000. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and cause partial denial of service.
- CVE-2026-70929High
Vulnerability in Oracle Hyperion Financial Management (component: Security). Affects version 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management, leading to unauthorized creation, deletion, modification, or access to critical data.
- CVE-2026-70928High
Vulnerability in Oracle Hyperion Financial Management (component: Security). Affects version 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Oracle Hyperion Financial Management, resulting in takeover.
- CVE-2026-70925High
Vulnerability in Oracle Hyperion Financial Management (component: Security). Affects version 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Oracle Hyperion Financial Management, leading to unauthorized creation, deletion, modification, or access to critical data.
- CVE-2026-70919Low
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An unauthenticated attacker with local access can exploit this (requires user interaction) to perform unauthorized update, insert, or delete of data. CVSS 3.1: 2.5 (Integrity impact).
- CVE-2026-70917Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An unauthenticated attacker with local access to the infrastructure can gain unauthorized read access to a subset of data.
- CVE-2026-70916Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An unauthenticated attacker with local access to the infrastructure can gain unauthorized read access to a subset of data.
- CVE-2026-70914High
Vulnerability in Oracle Hyperion Financial Management (component: Security). Affects version 11.2.25.0.000. Difficult to exploit vulnerability requires logon to infrastructure and human interaction, but can result in takeover of Oracle Hyperion Financial Management.
- CVE-2026-70912Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A low-privileged attacker with local access, under difficult conditions and user interaction, can gain unauthorized creation, deletion, or modification of critical data, with impact on other products.
- CVE-2026-70911Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An unauthenticated attacker over the network (HTTP) can gain unauthorized read access to a subset of data.
- CVE-2026-70909High
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An unauthenticated attacker with network access via HTTP can compromise the product, leading to unauthorized access to critical data or all accessible data, and cause a partial denial of service.
- CVE-2026-70853Low
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A high-privileged attacker with network access via HTTP can exploit this to gain unauthorized read access and cause partial denial of service. CVSS 3.1: 3.3 (Confidentiality and Availability impact).
- CVE-2026-70851Low
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A low-privileged attacker with network access via HTTP can exploit this to cause partial denial of service. CVSS 3.1: 3.1 (Availability impact).
- CVE-2026-70850Low
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A high-privileged attacker with local access can exploit this to perform unauthorized update, insert, or delete of data and cause partial denial of service. CVSS 3.1: 3.0 (Integrity and Availability impact).
- CVE-2026-70849Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A high-privileged attacker over the network (HTTP) can gain complete access to data and cause a complete denial of service (DoS).
- CVE-2026-70848Low
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An unauthenticated attacker with network access via HTTP can exploit this to gain unauthorized read access to a subset of data. CVSS 3.1: 3.7 (Confidentiality impact).
- CVE-2026-70847Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A low-privileged attacker with local access can gain complete access to data, with impact on other products.
- CVE-2026-70843Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A difficult-to-exploit flaw allows an unauthenticated attacker with access to the physical communication segment to compromise confidentiality and integrity. Successful attacks can result in unauthorized creation, deletion, or modification of data, as well as unauthorized access to data.
- CVE-2026-70842High
Vulnerability in Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). Affects version 11.2.25.0.000. A low-privileged attacker with logon to the infrastructure can easily compromise the system. Attacks may significantly impact additional products (scope change). Successful attacks may result in unauthorized creation, deletion, or modification of critical data and unauthorized access to all system data.
- CVE-2026-70841Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A difficult-to-exploit flaw allows a low-privileged attacker with logon access to compromise data confidentiality. Attacks may impact additional products (scope change) and lead to unauthorized access to data.
- CVE-2026-70840High
Vulnerability in Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). Affects version 11.2.25.0.000. A low-privileged attacker with logon to the infrastructure can easily compromise the system. Attacks may significantly impact additional products (scope change). Successful attacks may result in unauthorized creation, deletion, or modification of critical data and unauthorized access to all system data.
- CVE-2026-70838Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with logon access to compromise confidentiality and integrity. Attacks can result in unauthorized access to data and unauthorized modification of some data.
- CVE-2026-70836Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with logon access to compromise data confidentiality. Attacks can result in unauthorized access to data.
- CVE-2026-70834High
Vulnerability in Oracle Hyperion Financial Management (component: Security). Affects version 11.2.25.0.000. A high-privileged attacker can take over the system via HTTP, resulting in full compromise of confidentiality, integrity, and availability.
- CVE-2026-70832High
Vulnerability in Oracle Hyperion Financial Management (component: Security). Affects version 11.2.25.0.000. An unauthenticated attacker can gain full access to data, including critical data, via HTTP.
- CVE-2026-70831Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise data confidentiality. Attacks can result in unauthorized access to data.
- CVE-2026-70828High
Vulnerability in Oracle Hyperion Financial Management (component: Security). Affects version 11.2.25.0.000. A low-privileged attacker can gain full access to data via HTTP, and attacks may impact additional products (scope change).
- CVE-2026-70826Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise data confidentiality. Attacks can result in unauthorized access to data.
- CVE-2026-70825Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise data confidentiality. Attacks can result in unauthorized access to data.
- CVE-2026-70824Medium
Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise data confidentiality. Attacks can result in unauthorized access to data.
- CVE-2026-70823High
Vulnerability in Oracle Hyperion Financial Management (component: Security). Affects version 11.2.25.0.000. An unauthenticated attacker can, under difficult conditions, gain full access to data and modify, create, or delete it via HTTPS.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

