OracleCVE-2026-87248
Oracle Hyperion Financial Management: takeover via Security
Medium6.7CVE-2026-87248 · Published Sep 15, 2026 · updated Sep 21, 2026
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Oracle Hyperion Financial Management Product | <= 11.2.26.0.000 | No fix yet |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-269
More Oracle advisories
All Oracle| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Sep 15 | Oracle GraalVM for JDK: takeover via Compiler | High8.1 | No fix yet |
| Sep 15 | Oracle GraalVM for JDK: data tampering via Compiler | High7.0 | No fix yet |
| Sep 15 | Oracle GraalVM for JDK: takeover via Compiler | High8.1 | No fix yet |
| Sep 15 | Oracle VM VirtualBox: flaw in Core | Low3.2 | No fix yet |
| Sep 15 | Oracle VM VirtualBox: denial of service via Core | Medium6.0 | No fix yet |
| Sep 15 | Oracle GraalVM: takeover via Compiler | High8.1 | No fix yet |