Oracle Hyperion Financial Reporting vulnerabilities
32 known CVE vulnerabilities in Oracle Hyperion Financial Reporting, translated and rated.
- CVE-2026-70745Critical
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. Easily exploitable by an unauthenticated attacker over HTTP, allowing takeover of the system. CVSS score 9.8.
- CVE-2026-70741Critical
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. Easily exploitable by an unauthenticated attacker over RMI, allowing unauthorized data access and modification. CVSS score 9.1.
- CVE-2026-70740Critical
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. Easily exploitable by an unauthenticated attacker over HTTP, allowing takeover of the system. CVSS score 9.8.
- CVE-2026-70739Critical
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. Easily exploitable by an unauthenticated attacker over HTTP, allowing takeover of the system. CVSS score 9.8.
- CVE-2026-70794Medium
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. A difficult-to-exploit flaw allows a low-privileged attacker with logon access to compromise data integrity. Attacks can result in unauthorized creation, deletion, or modification of data.
- CVE-2026-70793Medium
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to compromise confidentiality and integrity. Attacks can result in unauthorized modification of some data and unauthorized read access to a subset of data.
- CVE-2026-70789Medium
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. Difficult to exploit, requires user interaction, allows unauthenticated attacker via HTTP to gain unauthorized access to critical data or full access to all data and modify some data.
- CVE-2026-70788Medium
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. Easily exploitable, allows unauthenticated attacker via HTTP to perform unauthorized update, insert or delete of some data and read a subset of data.
- CVE-2026-70787High
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. A low-privileged attacker can compromise the system via HTTP. Easily exploitable, CVSS 8.8.
- CVE-2026-70785Low
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. An unauthenticated attacker with network access via HTTP can exploit this to gain unauthorized read access to a subset of data. CVSS 3.1: 3.7 (Confidentiality impact).
- CVE-2026-70784Medium
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. Difficult to exploit, requires logon to infrastructure, allows low privileged attacker to perform unauthorized creation, deletion or modification of critical data and read a subset of data.
- CVE-2026-70780Medium
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. Difficult to exploit, requires physical access to network segment, allows unauthenticated attacker to perform unauthorized creation, deletion or modification of critical data and full access to data.
- CVE-2026-70776Low
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. A low-privileged attacker with network access via HTTP can exploit this (requires user interaction) to perform unauthorized update, insert, or delete of data. CVSS 3.1: 2.6 (Integrity impact).
- CVE-2026-70769Medium
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. Difficult to exploit, allows unauthenticated attacker via HTTP to gain unauthorized access to critical data or full access to all data and modify some data.
- CVE-2026-70768Medium
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. Easily exploitable, requires user interaction, allows unauthenticated attacker via HTTP to perform unauthorized update of some data and read a subset of data, with potential impact on other products (scope change).
- CVE-2026-70767Medium
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. Easily exploitable, allows low privileged attacker via HTTP to gain unauthorized access to critical data or full access to all data.
- CVE-2026-70766Medium
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. Easily exploitable, requires user interaction, allows unauthenticated attacker via HTTP to perform unauthorized update of some data and read a subset of data.
- CVE-2026-70765Medium
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. Easily exploitable, requires user interaction, allows unauthenticated attacker via HTTP to perform unauthorized update of some data and read a subset of data, with potential impact on other products (scope change).
- CVE-2026-70759Medium
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. An unauthenticated attacker with network access via HTTP can compromise the product, but requires user interaction. Successful attacks can result in unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data.
- CVE-2026-70758Medium
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. A low-privileged attacker with local access can compromise the product, but the attack is difficult to exploit. Successful attacks can result in unauthorized creation, deletion, or modification of critical data and unauthorized read access to a subset of data.
- CVE-2026-70754Medium
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. An unauthenticated attacker with network access via HTTP can gain unauthorized read access to a subset of data. The attack is easy to exploit and requires no user interaction.
- CVE-2026-70753Medium
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. A low-privileged attacker with network access via HTTP can gain complete access to critical data and modify some data. The attack requires user interaction.
- CVE-2026-70752High
Vulnerability in Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). Affects version 11.2.25.0.000. Easily exploitable by unauthenticated attacker via HTTP. Allows unauthorized access to critical data or complete access to all product data.
- CVE-2026-70751Medium
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. An unauthenticated attacker with network access via HTTP can gain complete access to critical data and modify it. The attack is difficult to exploit and requires user interaction.
- CVE-2026-70750High
Vulnerability in Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). Affects version 11.2.25.0.000. Easily exploitable by low-privileged attacker with logon to the infrastructure. Allows takeover of Oracle Hyperion Financial Reporting.
- CVE-2026-70749High
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. Difficult to exploit flaw allows unauthenticated attacker via network (HTTP) to take over the system. CVSS score 8.1.
- CVE-2026-70746High
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. Easily exploitable flaw requires user interaction and allows unauthenticated attacker to gain unauthorized access and modify data. CVSS score 8.1.
- CVE-2026-70744High
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. Difficult to exploit flaw allows unauthenticated attacker via network (HTTP) to take over the system. CVSS score 8.1.
- CVE-2026-70743High
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. Easily exploitable flaw allows unauthenticated attacker via network (HTTPS) to gain unauthorized access to data and cause partial denial of service. CVSS score 8.2.
- CVE-2026-70742High
Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. Easily exploitable flaw allows low-privileged attacker via network (HTTPS) to take over the system. CVSS score 8.8.
- CVE-2026-60682Medium
Vulnerability in Oracle Hyperion Financial Reporting (component: Repository) affects version 11.2.25.0.000. It is easily exploitable by an unauthenticated attacker via HTTP, allowing unauthorized update, insert, or delete access and read access to a subset of data.
- CVE-2026-60391High
Vulnerability in Oracle Hyperion Financial Reporting (component: Server). Affected version is 11.2.25.0.000. Easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise it. Successful attacks can result in unauthorized access to critical data or complete access to all data.

