Security Vulnerability in Oracle Hyperion Financial Management by Oracle
CVE-2026-87249

7.1HIGH

Key Information:

Vendor

Oracle
Status
Oracle Hyperion Financial Management
Vendor
CVE Published:
15 September 2026

What is CVE-2026-87249?

An identified security vulnerability within Oracle Hyperion Financial Management introduces significant risks, enabling an unauthenticated attacker with network access via HTTP to potentially exploit the system. While successful exploitation necessitates human interaction from another individual, the implications of this vulnerability are serious. It can lead to unauthorized creation, deletion, or modification of critical data and could also enable the attacker to initiate a partial denial of service (DoS) condition. Organizations using version 11.2.26.0.000 are advised to take preventive measures to safeguard their data against possible breaches.

Affected Version(s)

Oracle Hyperion Financial Management 11.2.26.0.000

References

https://www.oracle.com/security-alerts/cspusep2026.html
vendor-advisory

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.