Oracle Hyperion Financial Management vulnerabilities
85 known vulnerabilities affecting oracle/hyperion_financial_management.
Total CVEs
85
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL5HIGH33MEDIUM38LOW9
Vulnerabilities
Page 4 of 5
CVE-2026-71123P4MEDIUMCVSS 5.4v11.2.25.0.0002026-08-18
CVE-2026-71123 [MEDIUM] CWE-269 CVE-2026-71123: Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks require human interac
nvd
CVE-2026-71120P4MEDIUMCVSS 5.3v11.2.25.0.0002026-08-18
CVE-2026-71120 [MEDIUM] CWE-284 CVE-2026-71120: Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerabilit
nvd
CVE-2019-10219P4MEDIUMCVSS 6.1v11.1.2.4v11.2.6.02019-11-08
CVE-2019-10219 [MEDIUM] CWE-79 CVE-2019-10219: A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properl
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.
nvd
CVE-2026-71085P4MEDIUMCVSS 4.9v11.2.25.0.0002026-08-18
CVE-2026-71085 [MEDIUM] CWE-269 CVE-2026-71085: Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability
nvd
CVE-2026-70841P4MEDIUMCVSS 5.6v11.2.25.0.0002026-08-18
CVE-2026-70841 [MEDIUM] CWE-269 CVE-2026-70841: Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Finan
nvd
CVE-2026-71118P4MEDIUMCVSS 4.8v11.2.25.0.0002026-08-18
CVE-2026-71118 [MEDIUM] CWE-284 CVE-2026-71118: Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerabili
nvd
CVE-2026-70836P4MEDIUMCVSS 5.5v11.2.25.0.0002026-08-18
CVE-2026-70836 [MEDIUM] CWE-269 CVE-2026-70836: Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financi
nvd
CVE-2026-70912P4MEDIUMCVSS 5.3v11.2.25.0.0002026-08-18
CVE-2026-70912 [MEDIUM] CWE-284 CVE-2026-70912: Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Finan
nvd
CVE-2026-71060P4MEDIUMCVSS 4.4v11.2.25.0.0002026-08-18
CVE-2026-71060 [MEDIUM] CWE-284 CVE-2026-71060: Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerabili
nvd
CVE-2026-71145P4MEDIUMCVSS 4.4v11.2.25.0.0002026-08-18
CVE-2026-71145 [MEDIUM] CWE-284 CVE-2026-71145: Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks require human intera
nvd
CVE-2026-71147P4MEDIUMCVSS 4.2v11.2.25.0.0002026-08-18
CVE-2026-71147 [MEDIUM] CWE-284 CVE-2026-71147: Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks require human inter
nvd
CVE-2026-71149P4MEDIUMCVSS 4.2v11.2.25.0.0002026-08-18
CVE-2026-71149 [MEDIUM] CWE-284 CVE-2026-71149: Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Finan
nvd
CVE-2026-71105P4MEDIUMCVSS 4.7v11.2.25.0.0002026-08-18
CVE-2026-71105 [MEDIUM] CWE-284 CVE-2026-71105: Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Finan
nvd
CVE-2026-70917P4MEDIUMCVSS 4.0v11.2.25.0.0002026-08-18
CVE-2026-70917 [MEDIUM] CWE-200 CVE-2026-70917: Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financ
nvd
CVE-2026-70916P4MEDIUMCVSS 4.0v11.2.25.0.0002026-08-18
CVE-2026-70916 [MEDIUM] CWE-200 CVE-2026-70916: Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financ
nvd
CVE-2020-2777P4MEDIUMCVSS 4.2v11.1.2.42020-04-15
CVE-2020-2777 [MEDIUM] CVE-2020-2777: Vulnerability in the Hyperion Financial Management product of Oracle Hyperion (component: Security).
Vulnerability in the Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Financial Management. Successful attacks require human interaction from a person other th
nvd
CVE-2026-70848P4LOWCVSS 3.7v11.2.25.0.0002026-08-18
CVE-2026-70848 [LOW] CWE-269 CVE-2026-70848: Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability
nvd
CVE-2021-2158P4LOWCVSS 3.9v11.1.2.42021-04-22
CVE-2021-2158 [LOW] CVE-2021-2158: Vulnerability in the Hyperion Financial Management product of Oracle Hyperion (component: Task Autom
Vulnerability in the Hyperion Financial Management product of Oracle Hyperion (component: Task Automation). The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Financial Management. Successful attacks require human interaction from a person othe
nvd
CVE-2026-70851P4LOWCVSS 3.1v11.2.25.0.0002026-08-18
CVE-2026-70851 [LOW] CWE-284 CVE-2026-70851: Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability c
nvd
CVE-2026-70853P4LOWCVSS 3.3v11.2.25.0.0002026-08-18
CVE-2026-70853 [LOW] CWE-284 CVE-2026-70853: Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability
nvd