Threat Intelligence Database

CVE-2026-71149 is a vulnerability in Oracle Hyperion Financial Management version 11.2.25.0.000. It allows a low privileged attacker with logon access to the infrastructure where the product runs to potentially compromise it. Exploitation requires human interaction from a user other than the attacker. Successful exploitation can lead to unauthorized read, update, insert, or delete access to some accessible data, and may cause a partial denial of service. The vulnerability has a CVSS 3.1 base score of 4.2, indicating medium severity.

CVE-2026-71147 is a medium severity vulnerability in Oracle Hyperion Financial Management version 11.2.25.0.000. It allows an unauthenticated attacker with network access via HTTP to potentially cause unauthorized update, insert, or delete operations on accessible data and partial denial of service. Exploitation is difficult and requires human interaction from a user other than the attacker. The vulnerability impacts integrity and availability but does not affect confidentiality.

CVE-2026-71146 is a low-severity vulnerability in Oracle Hyperion Financial Management version 11.2.25.0.000. It requires a high privileged attacker with logon access to the infrastructure where the product runs. Successful exploitation can cause a partial denial of service (partial DOS) impacting availability. The vulnerability is difficult to exploit and does not affect confidentiality or integrity.

CVE-2026-71145 is a medium severity vulnerability in Oracle Hyperion Financial Management version 11.2.25.0.000. It allows a low privileged attacker with network access via HTTP to potentially perform unauthorized update, insert, or delete operations on some accessible data, as well as unauthorized read access to a subset of data. Exploitation is difficult and requires human interaction from a person other than the attacker. The vulnerability may also impact additional Oracle products beyond Hyperion Financial Management. The CVSS 3.1 base score is 4.4, reflecting limited confidentiality and integrity impacts without availability impact.

CVE-2026-71144 is a low-severity vulnerability in Oracle Hyperion Financial Management version 11.2.25.0.000. It requires a high-privileged attacker with logon access to the infrastructure where the product runs. Successful exploitation can lead to unauthorized read and modification (update, insert, delete) of some accessible data within Oracle Hyperion Financial Management. The vulnerability is difficult to exploit and does not impact availability.

CVE-2026-71119 is a vulnerability in Oracle Hyperion Financial Management version 11.2.25.0.000 that allows a high privileged attacker with logon access to the infrastructure to potentially take over the application. The vulnerability is difficult to exploit and impacts confidentiality, integrity, and availability. The CVSS 3.1 base score is 6.4, indicating a medium severity level. No official patch or remediation level is explicitly stated in the vendor advisory, but Oracle strongly recommends applying security patches promptly as part of their Critical Security Patch Update program.

CVE-2026-71118 is a medium severity vulnerability in Oracle Hyperion Financial Management version 11.2.25.0.000. It allows an unauthenticated attacker with network access via HTTP to potentially perform unauthorized read and write operations on some accessible data. The vulnerability is difficult to exploit and impacts confidentiality and integrity but not availability.

CVE-2026-71117 is a high-severity vulnerability in Oracle Hyperion Financial Management version 11.2.25.0.000. It requires a high privileged attacker with logon access to the infrastructure where the product runs. Successful exploitation can lead to full compromise and takeover of Oracle Hyperion Financial Management, with potential impact on additional Oracle products. The vulnerability has a CVSS 3.1 base score of 7.5, indicating significant confidentiality, integrity, and availability impacts. No official patch or remediation level has been confirmed yet. Oracle recommends applying security patches promptly as part of their Critical Security Patch Update program.

CVE-2026-71109 is a vulnerability in Oracle Hyperion Financial Management version 11.2.25.0.000 that allows a high privileged attacker with logon access to the infrastructure to compromise the product. Successful exploitation can lead to complete takeover of Oracle Hyperion Financial Management. The vulnerability has a CVSS 3.1 base score of 6.7, indicating a medium severity with high impact on confidentiality, integrity, and availability.

CVE-2026-71108 is a medium severity vulnerability in Oracle Hyperion Financial Management version 11.2.25.0.000. It allows a low privileged attacker with network access via HTTP to potentially gain unauthorized access to critical or all accessible data within the product. The vulnerability is difficult to exploit and impacts confidentiality without affecting integrity or availability.