Hyperion Financial Reporting vulnerabilities

12 known vulnerabilities in Hyperion Financial Reporting from Oracle. 11 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Oracle Hyperion Financial Reporting: Improper Access Control

  CVE-2026-70787Aug 18, 2026Oracle

  Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to co

• 7.5 High severity

  Oracle Hyperion Financial Reporting: Improper Access Control

  CVE-2026-70752Aug 18, 2026Oracle

  Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to c

• 7.8 High severity

  Oracle Hyperion Financial Reporting: Improper Access Control

  CVE-2026-70750Aug 18, 2026Oracle

  Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure w

• 8.1 High severity

  Oracle Hyperion Financial Reporting: Improper Access Control

  CVE-2026-70749Aug 18, 2026Oracle

  Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to

• 8.1 High severity

  Oracle Hyperion Financial Reporting: Improper Access Control

  CVE-2026-70746Aug 18, 2026Oracle

  Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to c

• 9.8 Critical severity

  Oracle Hyperion Financial Reporting: Improper Access Control

  CVE-2026-70745Aug 18, 2026Oracle

  Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to c

• 8.1 High severity

  Oracle Hyperion Financial Reporting: Improper Access Control

  CVE-2026-70744Aug 18, 2026Oracle

  Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to

• 8.8 High severity

  Oracle Hyperion Financial Reporting: Improper Access Control

  CVE-2026-70742Aug 18, 2026Oracle

  Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to c

• 9.1 Critical severity

  Oracle Hyperion Financial Reporting: Improper Access Control

  CVE-2026-70741Aug 18, 2026Oracle

  Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via RMI to co

• 9.8 Critical severity

  Oracle Hyperion Financial Reporting: Improper Access Control

  CVE-2026-70740Aug 18, 2026Oracle

  Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to c

• 9.8 Critical severity

  Oracle Hyperion Financial Reporting: Improper Access Control

  CVE-2026-70739Aug 18, 2026Oracle

  Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to c

• 6.1 Medium severity

  JQuery Cross-Site Scripting (XSS) Exploited

  CVE-2020-11023Apr 29, 2020JqueryEPSS 84.9%

  In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untr