Oracle vulnerabilities

We track 3,014 vulnerabilities in Oracle products across 60+ products. 3,006 are rated high or critical, and 81 have been exploited in real attacks. The most recent was published on October 24, 2026.

3,014vulnerabilities

715critical

2,291high

81exploited

8.3average CVSS score

Latest Oracle vulnerabilities

8.8 High severity
Oracle Hyperion Financial Management: Improper Privilege Management
CVE-2026-87204Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to
7.5 High severity
Oracle Hyperion Financial Management: Improper Privilege Management
CVE-2026-87203Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP
8.8 High severity
Oracle Hyperion Financial Management: Improper Neutralization of Special Elements used in an SQL Command
CVE-2026-87202Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to
8.8 High severity
Oracle Hyperion Financial Management: Improper Privilege Management
CVE-2026-87201Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to
8.2 High severity
Oracle Hyperion Financial Management: Missing Authentication for Critical Functionality
CVE-2026-87200Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t
7.5 High severity
Oracle Hyperion Financial Management: Uncontrolled Resource Consumption
CVE-2026-87199Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t
7.4 High severity
Oracle Hyperion Financial Management: Improper Access Control
CVE-2026-87198Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP
8.2 High severity
Oracle Hyperion Financial Management: Missing Authentication for Critical Functionality
CVE-2026-87197Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t
8.2 High severity
Oracle Hyperion Financial Management: Missing Authentication for Critical Functionality
CVE-2026-87196Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t
7.4 High severity
Oracle Hyperion Financial Management: Missing Authentication for Critical Functionality
CVE-2026-87195Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS
7.5 High severity
Oracle Hyperion Financial Management: Improper Access Control
CVE-2026-87194Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t
7.5 High severity
Oracle Hyperion Financial Management: Improper Access Control
CVE-2026-87193Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t
7.1 High severity
Oracle Hyperion Financial Management: Improper Access Control
CVE-2026-87192Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to
7.1 High severity
Oracle Hyperion Financial Management: Improper Access Control
CVE-2026-87191Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to
7.5 High severity
Oracle Hyperion Financial Management: Improper Privilege Management
CVE-2026-87190Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP
9.1 Critical severity
Oracle Hyperion Financial Management: Improper Privilege Management
CVE-2026-87189Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via Oracle
9.8 Critical severity
Oracle Hyperion Financial Management: Improper Authentication
CVE-2026-87188Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t
8.8 High severity
Oracle Hyperion Financial Management: Improper Privilege Management
CVE-2026-87187Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical co
9.6 Critical severity
Oracle Hyperion Financial Management: Improper Privilege Management
CVE-2026-87186Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical co
8.8 High severity
Oracle Hyperion Financial Management: Improper Privilege Management
CVE-2026-87185Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to
9.8 Critical severity
Oracle Hyperion Financial Management: Improper Neutralization of Special Elements used in an SQL Command
CVE-2026-87184Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via SQL to
7.7 High severity
Oracle Hyperion Financial Management: Improper Privilege Management
CVE-2026-87183Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructu
8.8 High severity
Oracle Hyperion Financial Management: Improper Privilege Management
CVE-2026-87182Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructur
8.8 High severity
Oracle Hyperion Financial Management: Improper Privilege Management
CVE-2026-87181Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to
8.8 High severity
Oracle Hyperion Financial Management: Improper Privilege Management
CVE-2026-87180Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to
8.8 High severity
Oracle Hyperion Financial Management: Improper Privilege Management
CVE-2026-87179Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to
8.7 High severity
Oracle Hyperion Financial Management: Improper Access Control
CVE-2026-87178Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via SQL to
8.5 High severity
Oracle Hyperion Financial Management: Improper Access Control
CVE-2026-87177Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to
9.1 Critical severity
Oracle Hyperion Financial Management: Improper Authentication
CVE-2026-87176Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to
9.1 Critical severity
Oracle Hyperion Financial Management: Improper Authentication
CVE-2026-87175Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to
8.2 High severity
Oracle Hyperion Financial Management: Improper Access Control
CVE-2026-87174Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to
9.1 Critical severity
Oracle Hyperion Financial Management: Improper Authentication
CVE-2026-87173Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to
9.9 Critical severity
Oracle Hyperion Financial Management: Improper Privilege Management
CVE-2026-87172Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to
8.7 High severity
Oracle Hyperion Financial Management: Improper Access Control
CVE-2026-87171Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP
9.1 Critical severity
Oracle Hyperion Financial Management: Improper Authentication
CVE-2026-87170Sep 15, 2026Oracle
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t
8.1 High severity
Oracle Purchasing: Improper Access Control
CVE-2026-87168Sep 15, 2026Oracle
Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: G-Invoicing). Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compro
8.1 High severity
Oracle Purchasing: Improper Access Control
CVE-2026-87167Sep 15, 2026Oracle
Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: G-Invoicing). Supported versions that are affected are 12.2.11-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compro
8.1 High severity
Oracle Purchasing: Improper Access Control
CVE-2026-87166Sep 15, 2026Oracle
Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to comprom
8.8 High severity
Oracle Contract Lifecycle Management for…: Improper Privilege Management
CVE-2026-87165Sep 15, 2026Oracle
Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: ECC For Award and IDV). The supported version that is affected is V16. Easily exploitable vulnerability allows low privileged attacker wi
8.0 High severity
Oracle Banking Branch: Improper Privilege Management
CVE-2026-87164Sep 15, 2026Oracle
Vulnerability in the Oracle Banking Branch product of Oracle Financial Services Applications (component: Reports). Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network ac