CVE-2026-71109

MediumCVSS 6.7

Published: 18/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

5th percentile - higher than 5% of all known CVEs

Summary

Vulnerability in Oracle Hyperion Financial Management (Security) in version 11.2.25.0.000. A high-privileged attacker with local access can fully compromise the system.

Risk Assessment

Risk includes full system compromise, leading to complete loss of confidentiality, integrity, and availability of financial data.

Recommendation

Apply Oracle patches. Restrict local access to trusted administrators and enforce least privilege.

Original NVD description (English source)

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).