Security Vulnerability in Oracle Hyperion Financial Management by Oracle

CVE-2026-71147

What is CVE-2026-71147?

A security vulnerability exists in the Oracle Hyperion Financial Management product, which can be exploited by unauthenticated attackers with network access through HTTP. Although the exploitation requires human interaction from a third party, successful attacks can lead to unauthorized updates, inserts, or deletions of accessible data within Oracle Hyperion Financial Management. Additionally, attackers may exploit this vulnerability to initiate a partial denial of service, impacting the application's performance. Users should be aware of this security flaw and take the necessary precautions to mitigate potential risks.

References