Threat Intelligence Database

A vulnerability in Oracle Hyperion Financial Management version 11.2.26.0.000 allows an unauthenticated attacker with network access via HTTP to cause unauthorized modification of critical data and partial denial of service. Exploitation requires user interaction. The vulnerability has a CVSS 3.1 base score of 7.1, indicating high severity with integrity and availability impacts. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update.

A vulnerability exists in Oracle Hyperion Financial Management version 11.2.26.0.000 that allows a high privileged attacker with logon access to the infrastructure to compromise the product. The vulnerability has a CVSS 3.1 base score of 6.7, indicating medium severity with impacts on confidentiality, integrity, and availability. Successful exploitation can lead to takeover of Oracle Hyperion Financial Management. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides patches for this and many other vulnerabilities across Oracle products.

A vulnerability exists in Oracle Hyperion Financial Management version 11.2.26.0.000 that allows a low privileged attacker with network access via HTTP to potentially gain unauthorized access to critical data. Exploitation requires user interaction from a person other than the attacker and can lead to unauthorized read and partial write access to data. The vulnerability has a CVSS 3.1 base score of 7.6, indicating high severity. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides patches for this and many other vulnerabilities.

A vulnerability exists in Oracle Hyperion Financial Management version 11.2.26.0.000 that could allow a low privileged attacker with network access via HTTP to compromise the system. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with impacts on confidentiality, integrity, and availability. Exploitation is considered difficult. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides targeted security fixes.

A vulnerability exists in Oracle Hyperion Financial Management version 11.2.26.0.000 that allows a highly privileged attacker with network access via HTTP to compromise the system. The vulnerability has a CVSS 3.1 base score of 7.2, indicating high severity with impacts on confidentiality, integrity, and availability. Successful exploitation can lead to full takeover of the affected product. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides targeted security fixes.

A vulnerability exists in Oracle Hyperion Financial Management version 11.2.26.0.000 that allows a low privileged attacker with access to the physical communication segment to compromise the product. The vulnerability has a CVSS 3.1 base score of 8.0, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update. Customers are strongly advised to apply these patches promptly to mitigate the risk.

CVE-2026-87246 is a vulnerability in Oracle Hyperion Financial Management version 11.2.26.0.000. It allows a high privileged attacker with network access via HTTP to compromise the product, potentially resulting in full takeover. The vulnerability has a CVSS 3.1 base score of 7.2, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has addressed this vulnerability in their September 2026 Critical Security Patch Update.

A vulnerability exists in Oracle Hyperion Financial Management version 11.2.26.0.000 that allows a low privileged attacker with logon access to the infrastructure to potentially take over the application. The vulnerability is difficult to exploit and impacts confidentiality, integrity, and availability. The CVSS 3.1 base score is 7.0, indicating high severity. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides targeted security fixes across multiple products including Oracle Hyperion Financial Management.

A vulnerability in Oracle Hyperion Financial Management version 11.2.26.0.000 allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data or cause a partial denial of service. The vulnerability has a CVSS 3.1 base score of 7.1, indicating high severity with confidentiality and availability impacts. Oracle has released security patches as part of its September 2026 Critical Security Patch Update.

A high-severity vulnerability exists in Oracle Hyperion Financial Management version 11.2.26.0.000 that allows a low-privileged attacker with network access via SQL to compromise the system. Successful exploitation can lead to full takeover of the product, impacting confidentiality, integrity, and availability. The vulnerability has a CVSS 3.1 base score of 8.8. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides patches for affected products.