CVE-2026-70909 - Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)

Back Back to CVE browser

HIGH

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security)

Published Aug 18, 2026

8.2

HIGH

CVSS 3.1

EPSS 0.44%

Description

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 8.2 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L).

Affected products

Vendor Oracle Corporation Product Oracle Hyperion Financial Management Default
n/a
- Version
  11.2.25.0.000
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Oracle Corporation

Oracle Hyperion Financial Management

n/a

Version	Status	Constraints
11.2.25.0.000	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-284

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-61858
Advisory
https://www.oracle.com/security-alerts/cspuaug2026.html
vendor-advisoryVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-61858		Advisory
https://www.oracle.com/security-alerts/cspuaug2026.html		vendor-advisoryVendor Advisory