HF
Product
Hyperion Financial Reporting
On CISA KEVExploited in the wild
42
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 10Medium 23Low 3
Watch
Add Hyperion Financial Reporting to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-11023 In wildKEV | 6.1 | Apr 29 | Potential XSS vulnerability in jQuery Affected: 11.1.2.4 |
| CVE-2026-70745 | 9.8 | Aug 18 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server) Affected: 11.2.25.0.000 |
| CVE-2026-70740 | 9.8 | Aug 18 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server) Affected: 11.2.25.0.000 |
| CVE-2026-70739 | 9.8 | Aug 18 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server) Affected: 11.2.25.0.000 |
| CVE-2019-0228 | 9.8 | Apr 17 | Apache PDFBox 2.0.14 does not properly initialize the XML parser, which allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted XFDF Affected: 11.1.2.4; 11.2.6.0 |
| CVE-2016-3493 | 9.8 | Jul 21 | Unspecified vulnerability in the Hyperion Financial Reporting component in Oracle Hyperion 11.1.2.4 allows remote attackers to affect confidentiality, integrity, and availability… Affected: 11.1.2.4 |
| CVE-2026-70741 | 9.1 | Aug 18 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server) Affected: 11.2.25.0.000 |
| CVE-2026-70787 | 8.8 | Aug 18 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server) Affected: 11.2.25.0.000 |
| CVE-2026-70742 | 8.8 | Aug 18 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server) Affected: 11.2.25.0.000 |
| CVE-2018-2907 | 8.6 | Jul 18 | Vulnerability in the Hyperion Financial Reporting component of Oracle Hyperion (subcomponent: Security Models) Affected: 11.1.2 |
| CVE-2026-70749 | 8.1 | Aug 18 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server) Affected: 11.2.25.0.000 |
| CVE-2026-70746 | 8.1 | Aug 18 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server) Affected: 11.2.25.0.000 |
| CVE-2026-70744 | 8.1 | Aug 18 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server) Affected: 11.2.25.0.000 |
| CVE-2026-70750 | 7.8 | Aug 18 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server) Affected: 11.2.25.0.000 |
| CVE-2026-70752 | 7.5 | Aug 18 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server) Affected: 11.2.25.0.000 |
| CVE-2019-17566 | 7.5 | Nov 12 | Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href" attributes Affected: 11.1.2.4; 11.2.5.0 |
| CVE-2017-10310 | 7.5 | Oct 19 | Vulnerability in the Oracle Hyperion Financial Reporting component of Oracle Hyperion (subcomponent: Security Models) Affected: 11.1.2 |
| CVE-2026-70780 | 6.8 | Aug 18 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server) Affected: 11.2.25.0.000 |
| CVE-2026-70751 | 6.8 | Aug 18 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server) Affected: 11.2.25.0.000 |
| CVE-2026-70788 | 6.5 | Aug 18 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server) Affected: 11.2.25.0.000 |
| CVE-2026-70769 | 6.5 | Aug 18 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server) Affected: 11.2.25.0.000 |
| CVE-2026-70767 | 6.5 | Aug 18 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server) Affected: 11.2.25.0.000 |
| CVE-2017-10358 | 6.4 | Oct 19 | Vulnerability in the Oracle Hyperion Financial Reporting component of Oracle Hyperion (subcomponent: Workspace) Affected: 11.1.2 |
| CVE-2026-70753 | 6.3 | Aug 18 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server) Affected: 11.2.25.0.000 |
| CVE-2026-70768 | 6.1 | Aug 18 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server) Affected: 11.2.25.0.000 |
| CVE-2026-70765 | 6.1 | Aug 18 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server) Affected: 11.2.25.0.000 |
| CVE-2021-35665 | 6.1 | Oct 20 | Vulnerability in the Hyperion Financial Reporting product of Oracle Hyperion (component: Repository) Affected: 11.2.6.0 |
| CVE-2026-70789 | 5.9 | Aug 18 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server) Affected: 11.2.25.0.000 |
| CVE-2021-27906 | 5.5 | Mar 19 | A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file Affected: 11.1.2.4; 11.2.6.0 |
| CVE-2021-27807 | 5.5 | Mar 19 | A carefully crafted PDF file can trigger an infinite loop while loading the file Affected: 11.1.2.4; 11.2.6.0 |
| CVE-2026-70766 | 5.4 | Aug 18 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server) Affected: 11.2.25.0.000 |
| CVE-2026-70759 | 5.4 | Aug 18 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server) Affected: 11.2.25.0.000 |
| CVE-2025-50108 | 5.4 | Jul 15 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Workspace) Affected: 11.2.20.0.000 |
| CVE-2026-70784 | 5.3 | Aug 18 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server) Affected: 11.2.25.0.000 |
| CVE-2026-70758 | 5.3 | Aug 18 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server) Affected: 11.2.25.0.000 |
| CVE-2026-70754 | 5.3 | Aug 18 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server) Affected: 11.2.25.0.000 |
| CVE-2026-70794 | 4.7 | Aug 18 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server) Affected: 11.2.25.0.000 |
| CVE-2026-70793 | 4.2 | Aug 18 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server) Affected: 11.2.25.0.000 |
| CVE-2019-2959 | 4.2 | Oct 16 | Vulnerability in the Hyperion Financial Reporting product of Oracle Hyperion (component: Security Models) Affected: 11.1.2.4 |
| CVE-2026-70785 | 3.7 | Aug 18 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server) Affected: 11.2.25.0.000 |
| CVE-2026-70776 | 2.6 | Aug 18 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server) Affected: 11.2.25.0.000 |
| CVE-2020-2769 | 2.4 | Apr 15 | Vulnerability in the Hyperion Financial Reporting product of Oracle Hyperion (component: Web Based Report Designer) Affected: 11.1.2.4 |
Showing 42