Security Vulnerability in Oracle Hyperion Financial Management by Oracle
CVE-2026-71146

1.9LOW

Key Information:

Vendor

Oracle
Status
Oracle Hyperion Financial Management
Vendor
CVE Published:
18 August 2026

What is CVE-2026-71146?

A security flaw exists within the Oracle Hyperion Financial Management product that could potentially allow a high privileged attacker, already authenticated within the infrastructure, to compromise its functionality. This vulnerability could lead to an unauthorized partial denial of service, impacting the availability of Oracle Hyperion Financial Management. It is crucial for users to be aware of this risk and apply necessary security measures as outlined in Oracle's security advisory.

Affected Version(s)

Oracle Hyperion Financial Management 11.2.25.0.000

References

https://www.oracle.com/security-alerts/cspuaug2026.html
vendor-advisory

CVSS V3.1

Score:
1.9
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.