Oracle vulnerabilities

We track 3,014 vulnerabilities in Oracle products across 60+ products. 3,006 are rated high or critical, and 81 have been exploited in real attacks. The most recent was published on October 24, 2026.

3,014vulnerabilities

715critical

2,291high

81exploited

8.3average CVSS score

Latest Oracle vulnerabilities

7.2 High severity
Oracle Hyperion Financial Management: Improper Privilege Management
CVE-2026-87244Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP t
8.0 High severity
Oracle Hyperion Financial Management: Improper Access Control
CVE-2026-87243Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical
7.4 High severity
Oracle Hyperion Financial Management: Improper Access Control
CVE-2026-87242Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS
8.1 High severity
Oracle Hyperion Financial Management: Improper Access Control
CVE-2026-87241Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical co
7.0 High severity
Oracle Hyperion Financial Management: Improper Privilege Management
CVE-2026-87240Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastruct
7.2 High severity
Oracle Hyperion Financial Management: Improper Privilege Management
CVE-2026-87239Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP t
8.8 High severity
Oracle Hyperion Financial Management: Improper Neutralization of Special Elements used in an SQL Command
CVE-2026-87238Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to
7.5 High severity
Oracle Hyperion Financial Management: Improper Privilege Management
CVE-2026-87237Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP
7.1 High severity
Oracle Hyperion Financial Management: Improper Access Control
CVE-2026-87236Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to
7.4 High severity
Oracle Hyperion Financial Management: Improper Access Control
CVE-2026-87235Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSH
8.1 High severity
Oracle Hyperion Financial Management: Improper Access Control
CVE-2026-87234Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to
7.6 High severity
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion…
CVE-2026-87233Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP t
8.1 High severity
Oracle Hyperion Financial Management: Improper Access Control
CVE-2026-87232Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical co
8.1 High severity
Oracle Hyperion Financial Management: Improper Privilege Management
CVE-2026-87231Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP
10.0 Critical severity
Oracle Hyperion Financial Management: Improper Access Control
CVE-2026-87230Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t
8.2 High severity
Oracle Hyperion Financial Management: Improper Access Control
CVE-2026-87229Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t
8.2 High severity
Oracle Hyperion Financial Management: Improper Access Control
CVE-2026-87228Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t
8.8 High severity
Oracle Hyperion Financial Management: Improper Privilege Management
CVE-2026-87227Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to
8.8 High severity
Oracle Hyperion Financial Management: Improper Privilege Management
CVE-2026-87226Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to
7.1 High severity
Oracle Hyperion Financial Management: Exposure of Sensitive Information to an Unauthorized Actor
CVE-2026-87225Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to
8.8 High severity
Oracle Hyperion Financial Management: Improper Privilege Management
CVE-2026-87224Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to
9.1 Critical severity
Oracle Hyperion Financial Management: Missing Authentication for Critical Functionality
CVE-2026-87223Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t
7.5 High severity
Oracle Hyperion Financial Management: Uncontrolled Resource Consumption
CVE-2026-87222Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t
7.5 High severity
Oracle Hyperion Financial Management: Exposure of Sensitive Information to an Unauthorized Actor
CVE-2026-87221Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t
7.1 High severity
Oracle Hyperion Financial Management: Improper Access Control
CVE-2026-87220Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical co
8.4 High severity
Oracle Hyperion Financial Management: Improper Access Control
CVE-2026-87219Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructur
8.1 High severity
Oracle Hyperion Financial Management: Improper Access Control
CVE-2026-87218Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical co
9.1 Critical severity
Oracle Hyperion Financial Management: Improper Authentication
CVE-2026-87217Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t
7.8 High severity
Oracle Hyperion Financial Management: Improper Privilege Management
CVE-2026-87216Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructur
7.5 High severity
Oracle Hyperion Financial Management: Uncontrolled Resource Consumption
CVE-2026-87215Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to
9.1 Critical severity
Oracle Hyperion Financial Management: Improper Privilege Management
CVE-2026-87214Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP t
7.4 High severity
Oracle Hyperion Financial Management: Improper Access Control
CVE-2026-87213Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP
7.4 High severity
Oracle Hyperion Financial Management: Improper Neutralization of Special Elements used in an SQL Command
CVE-2026-87212Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SQL
7.5 High severity
Oracle Hyperion Financial Management: Improper Access Control
CVE-2026-87211Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t
8.3 High severity
Oracle Hyperion Financial Management: Improper Access Control
CVE-2026-87210Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical co
7.1 High severity
Oracle Hyperion Financial Management: Exposure of Sensitive Information to an Unauthorized Actor
CVE-2026-87209Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to
7.1 High severity
Oracle Hyperion Financial Management: Improper Access Control
CVE-2026-87208Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to
7.2 High severity
Oracle Hyperion Financial Management: Improper Neutralization of Special Elements used in an SQL Command
CVE-2026-87207Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via SQL to
7.4 High severity
Oracle Hyperion Financial Management: Improper Access Control
CVE-2026-87206Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP
7.5 High severity
Oracle Hyperion Financial Management: Missing Authentication for Critical Functionality
CVE-2026-87205Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t