# Oracle Hyperion Financial Management vulnerabilities Source: https://junglewise.ai/threats/technologies/hyperion-financial-management Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/hyperion-financial-management.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 142 vulnerabilities in Oracle Hyperion Financial Management: 0 in the last 7 days and 142 in the last 90 days, 16 of them critical and 0 exploited in the wild. The most recent, CVE-2026-87250, was published on 15 September 2026. Nothing in the last four weeks, down from 80 vulnerabilities in the four before. 0 critical against 13. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 142 - All time: 142 (16 critical, 0 exploited in the wild) ## About Oracle Hyperion Financial Management Oracle software for financial planning, budgeting, and reporting. ## Latest Oracle Hyperion Financial Management vulnerabilities - [CVE-2026-87250: Oracle Hyperion Financial Management privilege escalation in Security component](https://junglewise.ai/threats/cve-2026-87250-oracle-hyperion-financial-management-privilege-escalation-in) (high, CVSS 7.6, published 15 Sep 2026) - [CVE-2026-87249: Oracle Hyperion Financial Management CSRF vulnerability](https://junglewise.ai/threats/cve-2026-87249-oracle-hyperion-financial-management-csrf-vulnerability) (high, CVSS 7.1, published 15 Sep 2026) - [CVE-2026-87248: Oracle Hyperion Financial Management privilege escalation in Security component](https://junglewise.ai/threats/cve-2026-87248-oracle-hyperion-financial-management-privilege-escalation-in) (medium, CVSS 6.7, published 15 Sep 2026) - [CVE-2026-87247: Oracle Hyperion Financial Management security component vulnerability](https://junglewise.ai/threats/cve-2026-87247-oracle-hyperion-financial-management-security-component) (high, CVSS 7.5, published 15 Sep 2026) - [CVE-2026-87246: Oracle Hyperion Financial Management authentication bypass in Security component](https://junglewise.ai/threats/cve-2026-87246-oracle-hyperion-financial-management-authentication-bypass-in) (high, CVSS 7.2, published 15 Sep 2026) - [CVE-2026-87245: Oracle Hyperion Financial Management privilege escalation in Security component](https://junglewise.ai/threats/cve-2026-87245-oracle-hyperion-financial-management-privilege-escalation-in) (high, CVSS 8, published 15 Sep 2026) - [CVE-2026-87244: Oracle Hyperion Financial Management authentication bypass in Security component](https://junglewise.ai/threats/cve-2026-87244-oracle-hyperion-financial-management-authentication-bypass-in) (high, CVSS 7.2, published 15 Sep 2026) - [CVE-2026-87243: Oracle Hyperion Financial Management unauthorized data access in Security component](https://junglewise.ai/threats/cve-2026-87243-oracle-hyperion-financial-management-unauthorized-data-access-in) (high, CVSS 8, published 15 Sep 2026) - [CVE-2026-87242: Oracle Hyperion Financial Management unauthorized data access via TLS](https://junglewise.ai/threats/cve-2026-87242-oracle-hyperion-financial-management-unauthorized-data-access-via) (high, CVSS 7.4, published 15 Sep 2026) - [CVE-2026-87241: Oracle Hyperion Financial Management physical authentication bypass](https://junglewise.ai/threats/cve-2026-87241-oracle-hyperion-financial-management-physical-authentication) (high, CVSS 8.1, published 15 Sep 2026) - [CVE-2026-87240: Oracle Hyperion Financial Management privilege escalation in Security component](https://junglewise.ai/threats/cve-2026-87240-oracle-hyperion-financial-management-privilege-escalation-in) (high, CVSS 7, published 15 Sep 2026) - [CVE-2026-87239: Oracle Hyperion Financial Management authentication bypass in Security component](https://junglewise.ai/threats/cve-2026-87239-oracle-hyperion-financial-management-authentication-bypass-in) (high, CVSS 7.2, published 15 Sep 2026) - [CVE-2026-87238: Oracle Hyperion Financial Management privilege escalation](https://junglewise.ai/threats/cve-2026-87238-oracle-hyperion-financial-management-privilege-escalation) (high, CVSS 8.8, published 15 Sep 2026) - [CVE-2026-87237: Oracle Hyperion Financial Management privilege escalation in Security component](https://junglewise.ai/threats/cve-2026-87237-oracle-hyperion-financial-management-privilege-escalation-in) (high, CVSS 7.5, published 15 Sep 2026) - [CVE-2026-87236: Oracle Hyperion Financial Management privilege escalation in Security component](https://junglewise.ai/threats/cve-2026-87236-oracle-hyperion-financial-management-privilege-escalation-in) (high, CVSS 7.1, published 15 Sep 2026) - [CVE-2026-87235: Oracle Hyperion Financial Management SSH authentication bypass in Security component](https://junglewise.ai/threats/cve-2026-87235-oracle-hyperion-financial-management-ssh-authentication-bypass-in) (high, CVSS 7.4, published 15 Sep 2026) - [CVE-2026-87234: Oracle Hyperion Financial Management authorization bypass](https://junglewise.ai/threats/cve-2026-87234-oracle-hyperion-financial-management-authorization-bypass) (high, CVSS 8.1, published 15 Sep 2026) - [CVE-2026-87233: Oracle Hyperion Financial Management security vulnerability](https://junglewise.ai/threats/cve-2026-87233-oracle-hyperion-financial-management-security-vulnerability) (high, CVSS 7.6, published 15 Sep 2026) - [CVE-2026-87232: Oracle Hyperion Financial Management unauthorized data access vulnerability](https://junglewise.ai/threats/cve-2026-87232-oracle-hyperion-financial-management-unauthorized-data-access) (high, CVSS 8.1, published 15 Sep 2026) - [CVE-2026-87231: Oracle Hyperion Financial Management unauthenticated remote code execution](https://junglewise.ai/threats/cve-2026-87231-oracle-hyperion-financial-management-unauthenticated-remote-code) (high, CVSS 8.1, published 15 Sep 2026) - [CVE-2026-87230: Oracle Hyperion Financial Management authentication bypass](https://junglewise.ai/threats/cve-2026-87230-oracle-hyperion-financial-management-authentication-bypass) (critical, CVSS 10, published 15 Sep 2026) - [CVE-2026-87229: Oracle Hyperion Financial Management authentication bypass in Security component](https://junglewise.ai/threats/cve-2026-87229-oracle-hyperion-financial-management-authentication-bypass-in) (high, CVSS 8.2, published 15 Sep 2026) - [CVE-2026-87228: Oracle Hyperion Financial Management unauthenticated access vulnerability](https://junglewise.ai/threats/cve-2026-87228-oracle-hyperion-financial-management-unauthenticated-access) (high, CVSS 8.2, published 15 Sep 2026) - [CVE-2026-87227: Oracle Hyperion Financial Management privilege escalation in Security component](https://junglewise.ai/threats/cve-2026-87227-oracle-hyperion-financial-management-privilege-escalation-in) (high, CVSS 8.8, published 15 Sep 2026) - [CVE-2026-87226: Oracle Hyperion Financial Management privilege escalation in Security](https://junglewise.ai/threats/cve-2026-87226-oracle-hyperion-financial-management-privilege-escalation-in) (high, CVSS 8.8, published 15 Sep 2026) ## Most severe Oracle Hyperion Financial Management vulnerabilities - [CVE-2026-87230: Oracle Hyperion Financial Management authentication bypass](https://junglewise.ai/threats/cve-2026-87230-oracle-hyperion-financial-management-authentication-bypass) (critical, CVSS 10, published 15 Sep 2026) - [CVE-2026-70921: Oracle Hyperion Financial Management authentication bypass in TLS](https://junglewise.ai/threats/cve-2026-70921-oracle-hyperion-financial-management-authentication-bypass-in-tls) (critical, CVSS 10, published 18 Aug 2026) - [CVE-2026-87172: Oracle Hyperion Financial Management authentication bypass in Security component](https://junglewise.ai/threats/cve-2026-87172-oracle-hyperion-financial-management-authentication-bypass-in) (critical, CVSS 9.9, published 15 Sep 2026) - [CVE-2026-70920: Oracle Hyperion Financial Management SQL injection vulnerability in Security component](https://junglewise.ai/threats/cve-2026-70920-oracle-hyperion-financial-management-sql-injection-vulnerability) (critical, CVSS 9.9, published 18 Aug 2026) - [CVE-2026-87184: Oracle Hyperion Financial Management SQL injection in Security component](https://junglewise.ai/threats/cve-2026-87184-oracle-hyperion-financial-management-sql-injection-in-security) (critical, CVSS 9.8, published 15 Sep 2026) - [CVE-2026-87188: Oracle Hyperion Financial Management authentication bypass](https://junglewise.ai/threats/cve-2026-87188-oracle-hyperion-financial-management-authentication-bypass) (critical, CVSS 9.8, published 15 Sep 2026) - [CVE-2026-87186: Oracle Hyperion Financial Management security vulnerability](https://junglewise.ai/threats/cve-2026-87186-oracle-hyperion-financial-management-security-vulnerability) (critical, CVSS 9.6, published 15 Sep 2026) - [CVE-2026-87214: Oracle Hyperion Financial Management security vulnerability in authentication](https://junglewise.ai/threats/cve-2026-87214-oracle-hyperion-financial-management-security-vulnerability-in) (critical, CVSS 9.1, published 15 Sep 2026) - [CVE-2026-87189: Oracle Hyperion Financial Management privilege escalation in Security component](https://junglewise.ai/threats/cve-2026-87189-oracle-hyperion-financial-management-privilege-escalation-in) (critical, CVSS 9.1, published 15 Sep 2026) - [CVE-2026-87223: Oracle Hyperion Financial Management unauthenticated security bypass](https://junglewise.ai/threats/cve-2026-87223-oracle-hyperion-financial-management-unauthenticated-security) (critical, CVSS 9.1, published 15 Sep 2026) ## Vulnerabilities per week Nothing in the last four weeks, down from 80 vulnerabilities in the four before. 0 critical against 13. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 62 | 3 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 80 | 13 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Oracle technologies - [Oracle MySQL Server](https://junglewise.ai/threats/technologies/mysql-server): 163 vulnerabilities - [Oracle Helidon](https://junglewise.ai/threats/technologies/helidon): 130 vulnerabilities - [Oracle MySQL Cluster](https://junglewise.ai/threats/technologies/mysql-cluster): 129 vulnerabilities - [Oracle Coherence](https://junglewise.ai/threats/technologies/coherence): 113 vulnerabilities - [Oracle E-Business Suite](https://junglewise.ai/threats/technologies/e-business-suite): 110 vulnerabilities - [Oracle WebCenter Content](https://junglewise.ai/threats/technologies/webcenter-content): 110 vulnerabilities - [Oracle Commerce Guided Search](https://junglewise.ai/threats/technologies/commerce-guided-search): 104 vulnerabilities - [Oracle Commerce Experience Manager](https://junglewise.ai/threats/technologies/commerce-experience-manager): 102 vulnerabilities - [Oracle JD Edwards EnterpriseOne Tools](https://junglewise.ai/threats/technologies/jd-edwards-enterpriseone-tools): 101 vulnerabilities - [Oracle PeopleSoft Enterprise PeopleTools](https://junglewise.ai/threats/technologies/peopletools): 101 vulnerabilities - [Oracle Java SE](https://junglewise.ai/threats/technologies/java-se): 92 vulnerabilities - [Oracle VirtualBox](https://junglewise.ai/threats/technologies/virtualbox): 86 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Oracle Hyperion Financial Management vulnerabilities", https://junglewise.ai/threats/technologies/hyperion-financial-management, 9 November 2026.