Security Vulnerability in Oracle Hyperion Financial Management by Oracle
CVE-2026-70853

3.3LOW

Key Information:

Vendor

Oracle
Status
Oracle Hyperion Financial Management
Vendor
CVE Published:
18 August 2026

What is CVE-2026-70853?

A security vulnerability exists in the Oracle Hyperion Financial Management product that enables privileged attackers with network access via HTTP to compromise sensitive data. This flaw can lead to unauthorized read access to certain data within Oracle Hyperion Financial Management and the potential for a partial denial of service. The vulnerability impacts version 11.2.25.0.000, highlighting the importance of promptly addressing security concerns in financial management software.

Affected Version(s)

Oracle Hyperion Financial Management 11.2.25.0.000

References

https://www.oracle.com/security-alerts/cspuaug2026.html
vendor-advisory

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.