Security Vulnerability in Oracle Hyperion Financial Management by Oracle
CVE-2026-71013

6MEDIUM

Key Information:

Vendor

Oracle
Status
Oracle Hyperion Financial Management
Vendor
CVE Published:
18 August 2026

What is CVE-2026-71013?

A security vulnerability exists in Oracle Hyperion Financial Management that could allow an attacker with high-level access to compromise the system. This vulnerability affects version 11.2.25.0.000 and can lead to unauthorized actions such as the creation, deletion, or modification of critical data. Attackers exploiting this weakness could gain access to all data managed by Oracle Hyperion Financial Management, undermining the integrity and confidentiality of sensitive information stored within the application. Continuous vigilance and timely updates are crucial to safeguarding against potential exploits.

Affected Version(s)

Oracle Hyperion Financial Management 11.2.25.0.000

References

https://www.oracle.com/security-alerts/cspuaug2026.html
vendor-advisory

CVSS V3.1

Score:
6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.