Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. While the vulnerability is in Oracle Hyperion Financial Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Hyperion Financial Management. While the vulnerability is in Oracle Hyperion Financial Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 8.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N).
CVE-2026-71150 is a high-severity vulnerability in Oracle Hyperion Financial Management version 11.2.25.0.000. It allows a low privileged attacker with network access via HTTP to compromise the system, potentially leading to full takeover. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 8.8. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update, which contains numerous security fixes across multiple products.
CVE-2026-71148 is a vulnerability in Oracle Hyperion Financial Management version 11.2.25.0.000 that allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to some accessible data. The vulnerability has a CVSS 3.1 base score of 5.3, indicating a medium severity with confidentiality impact only. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update advisory but has not explicitly confirmed patch availability for this specific version in the provided advisory content.
CVE-2026-71123 is a medium severity vulnerability in Oracle Hyperion Financial Management version 11.2.25.0.000. It allows an unauthenticated attacker with network access via HTTP to potentially compromise the system, but successful exploitation requires human interaction from a user other than the attacker. Exploitation can lead to unauthorized read access and unauthorized update, insert, or delete access to some accessible data within Oracle Hyperion Financial Management.
CVE-2026-71120 is a vulnerability in Oracle Hyperion Financial Management version 11.2.25.0.000 that allows a low privileged attacker with network access via HTTP to cause a denial of service (DoS) by making the application hang or crash repeatedly. The vulnerability is difficult to exploit and impacts availability without affecting confidentiality or integrity.
CVE-2026-71091 is a vulnerability in Oracle Hyperion Financial Management version 11.2.25.0.000 that allows a high privileged attacker with network access via SQL to compromise the system. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or complete access to all data accessible by Oracle Hyperion Financial Management. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity level.
CVE-2026-70952 is a high-severity vulnerability in Oracle Hyperion Financial Management version 11.2.25.0.000. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data or all accessible data within the product. The vulnerability also permits the attacker to cause a partial denial of service. The CVSS 3.1 base score is 8.2, reflecting high confidentiality impact and low availability impact. Oracle has published a Critical Security Patch Update advisory covering this and other vulnerabilities, recommending prompt patching.
CVE-2026-70940 is a high-severity vulnerability in Oracle Hyperion Financial Management version 11.2.25.0.000. It allows a low privileged attacker with network access via HTTP to compromise the system, potentially resulting in full takeover. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 8.8. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update, which contains numerous security fixes across multiple products.
CVE-2026-70935 is a vulnerability in Oracle Hyperion Financial Management version 11.2.25.0.000 that allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data or cause a partial denial of service. The vulnerability impacts confidentiality and availability with a CVSS 3.1 base score of 7.1. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update advisory.
CVE-2026-70933 is a vulnerability in Oracle Hyperion Financial Management version 11.2.25.0.000 that allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data or cause a partial denial of service. The vulnerability impacts confidentiality and availability with a CVSS score of 7.1. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update, which provides security fixes across multiple products.
CVE-2026-70928 is a high-severity vulnerability in Oracle Hyperion Financial Management version 11.2.25.0.000. It allows a low privileged attacker with network access via SQL to compromise the system, potentially leading to full takeover. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 8.8. Oracle has included this fix in their August 2026 Critical Security Patch Update.
CVE-2026-70925 is a high-severity vulnerability in Oracle Hyperion Financial Management version 11.2.25.0.000. It allows a low privileged attacker with network access via SQL to gain unauthorized creation, deletion, or modification access to critical data or all accessible data within the product. The vulnerability impacts confidentiality and integrity but not availability. Oracle has published a Critical Security Patch Update advisory covering this and many other vulnerabilities but does not explicitly confirm a patch for this specific version in the provided data.
CVE-2026-70921 is a critical vulnerability in Oracle Hyperion Financial Management version 11.2.25.0.000. It allows an unauthenticated attacker with network access via TLS to compromise the product, potentially leading to unauthorized creation, deletion, or modification of critical data. The vulnerability has a CVSS 3.1 base score of 10.0, indicating maximum severity with high confidentiality and integrity impacts. Attacks exploiting this vulnerability may also affect additional Oracle products due to scope change. Oracle has published a Critical Security Patch Update advisory addressing this and many other vulnerabilities.
CVE-2026-70919 is a low-severity vulnerability in Oracle Hyperion Financial Management version 11.2.25.0.000. It allows an unauthenticated attacker with logon access to the infrastructure hosting the product to potentially compromise it. Exploitation requires human interaction from a person other than the attacker. Successful exploitation can lead to unauthorized update, insert, or delete access to some data accessible by Oracle Hyperion Financial Management.
CVE-2026-70854 is a critical vulnerability in Oracle Hyperion Financial Management version 11.2.25.0.000. It allows an unauthenticated attacker with network access via HTTP to compromise the system. Exploitation can lead to unauthorized creation, deletion, or modification of critical data, or cause a hang or repeated crash resulting in a denial of service. The vulnerability has a CVSS 3.1 base score of 9.1, reflecting high integrity and availability impacts.
CVE-2026-70848 is a vulnerability in Oracle Hyperion Financial Management version 11.2.25.0.000 that allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to some accessible data. The vulnerability is difficult to exploit and has a low severity rating with a CVSS 3.1 base score of 3.7, impacting confidentiality only. Oracle has included this fix in its August 2026 Critical Security Patch Update.
CVE-2026-70823 is a high-severity vulnerability in Oracle Hyperion Financial Management version 11.2.25.0.000. It allows an unauthenticated attacker with network access via HTTPS to potentially compromise the system. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, or unauthorized access to all data accessible by Oracle Hyperion Financial Management. The vulnerability has a CVSS 3.1 base score of 7.4, indicating significant confidentiality and integrity impacts but no availability impact.