Oracle Hyperion Financial Management vulnerabilities

167 CVEs affecting Oracle Hyperion Financial Management, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-87250, published 2026-09-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2012-1714, published 2012-12-21. High severity, CVSS 10.0. EPSS: 3.6% chance of exploitation in the next 30 days. Unspecified vulnerability in a TList 6 ActiveX control in Oracle Hyperion Financial Management 11.1.1.4 and 11.1.2.1.104 allows remote attackers to execute arbitrary code via unknown vectors.
CVE-2019-10219, published 2019-11-08. Medium severity, CVSS 6.1. EPSS: 2.2% chance of exploitation in the next 30 days. A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions.…
CVE-2019-2899, published 2019-10-16. Low severity, CVSS 2.4. EPSS: 0.9% chance of exploitation in the next 30 days. Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component: OAM). Supported versions that are affected are 11.1.1.9.0, 11.1.2.4.0, 12.1.3.0.0 and 12.2.1.3.0. Easily…
CVE-2020-2777, published 2020-04-15. Medium severity, CVSS 4.2. EPSS: 0.8% chance of exploitation in the next 30 days. Vulnerability in the Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high…
CVE-2026-87184, published 2026-09-15. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability…
CVE-2021-2158, published 2021-04-22. Low severity, CVSS 3.9. EPSS: 0.6% chance of exploitation in the next 30 days. Vulnerability in the Hyperion Financial Management product of Oracle Hyperion (component: Task Automation). The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability…
CVE-2026-87207, published 2026-09-15. High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability…
CVE-2026-87238, published 2026-09-15. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability…
CVE-2026-87202, published 2026-09-15. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability…
CVE-2026-87188, published 2026-09-15. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability…

Latest

CVE-2026-87250, published 2026-09-15. High severity, CVSS 7.6. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability…
CVE-2026-87249, published 2026-09-15. High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability…
CVE-2026-87248, published 2026-09-15. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability…
CVE-2026-87247, published 2026-09-15. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit…
CVE-2026-87246, published 2026-09-15. High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability…
CVE-2026-87245, published 2026-09-15. High severity, CVSS 8.0. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability…
CVE-2026-87244, published 2026-09-15. High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability…
CVE-2026-87243, published 2026-09-15. High severity, CVSS 8.0. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit…
CVE-2026-87242, published 2026-09-15. High severity, CVSS 7.4. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit…
CVE-2026-87241, published 2026-09-15. High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability…