Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 9.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H).
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Oracle |
|
| Oracle Corporation |
|
No data.
No data.
References
| Link | Providers |
|---|---|
| https://www.oracle.com/security-alerts/cspuaug2026.html |
|
History
Fri, 21 Aug 2026 13:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Oracle Corporation
Oracle Corporation oracle Hyperion Financial Management |
|
| Vendors & Products |
Oracle Corporation
Oracle Corporation oracle Hyperion Financial Management |
Fri, 21 Aug 2026 05:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Unauthenticated HTTP Attack Enables Data Manipulation and Denial of Service in Oracle Hyperion Financial Management | |
| Weaknesses | CWE-287 CWE-400 |
Wed, 19 Aug 2026 13:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Unauthenticated Remote Access Enables Data Manipulation and Denial of Service in Oracle Hyperion Financial Management 11.2.25.0.000 | |
| Weaknesses | CWE-284 CWE-285 |
Wed, 19 Aug 2026 03:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Unauthenticated Remote Access Enables Data Manipulation and Denial of Service in Oracle Hyperion Financial Management 11.2.25.0.000 | |
| Weaknesses | CWE-284 CWE-285 |
Tue, 18 Aug 2026 21:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 9.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H). | |
| First Time appeared |
Oracle
Oracle hyperion Financial Management |
|
| CPEs | cpe:2.3:a:oracle:hyperion_financial_management:11.2.25.0.000:*:*:*:*:*:*:* | |
| Vendors & Products |
Oracle
Oracle hyperion Financial Management |
|
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: oracle
Published: 2026-08-18T21:02:10.818Z
Updated: 2026-08-18T21:02:10.818Z
Reserved: 2026-08-04T22:06:34.601Z
Link: CVE-2026-70854
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2026-08-18T21:17:41.480
Modified: 2026-08-20T13:07:28.683
Link: CVE-2026-70854
Redhat
No data.