Threat Intelligence Database

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).

CVE-2026-87172 is a critical vulnerability in Oracle Hyperion Financial Management version 11.2.26.0.000. It allows a low privileged attacker with network access via HTTP to compromise the product, potentially leading to full takeover. The vulnerability also has a scope change impact, affecting additional Oracle products. The CVSS 3.1 base score is 9.9, indicating critical confidentiality, integrity, and availability impacts. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update advisory.

CVE-2026-87171 is a high-severity vulnerability in Oracle Hyperion Financial Management version 11.2.26.0.000. It allows an unauthenticated attacker with network access via HTTPS to compromise the product, potentially leading to unauthorized creation, deletion, or modification of critical data. The vulnerability has a CVSS 3.1 base score of 8.7, indicating significant confidentiality and integrity impacts. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which contains numerous security fixes across multiple products.

CVE-2026-71150 is a high-severity vulnerability in Oracle Hyperion Financial Management version 11.2.25.0.000. It allows a low privileged attacker with network access via HTTP to compromise the system, potentially leading to full takeover. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 8.8. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update, which contains numerous security fixes across multiple products.

CVE-2026-71148 is a vulnerability in Oracle Hyperion Financial Management version 11.2.25.0.000 that allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to some accessible data. The vulnerability has a CVSS 3.1 base score of 5.3, indicating a medium severity with confidentiality impact only. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update advisory but has not explicitly confirmed patch availability for this specific version in the provided advisory content.

CVE-2026-71123 is a medium severity vulnerability in Oracle Hyperion Financial Management version 11.2.25.0.000. It allows an unauthenticated attacker with network access via HTTP to potentially compromise the system, but successful exploitation requires human interaction from a user other than the attacker. Exploitation can lead to unauthorized read access and unauthorized update, insert, or delete access to some accessible data within Oracle Hyperion Financial Management.

CVE-2026-71120 is a vulnerability in Oracle Hyperion Financial Management version 11.2.25.0.000 that allows a low privileged attacker with network access via HTTP to cause a denial of service (DoS) by making the application hang or crash repeatedly. The vulnerability is difficult to exploit and impacts availability without affecting confidentiality or integrity.

CVE-2026-71105 is a vulnerability in Oracle Hyperion Financial Management version 11.2.25.0.000. It allows a low privileged attacker with logon access to the infrastructure where the product runs to cause a denial of service by hanging or repeatedly crashing the application. The vulnerability is difficult to exploit and does not impact confidentiality or integrity but affects availability.

CVE-2026-71091 is a vulnerability in Oracle Hyperion Financial Management version 11.2.25.0.000 that allows a high privileged attacker with network access via SQL to compromise the system. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or complete access to all data accessible by Oracle Hyperion Financial Management. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity level.