CVE-2026-87214

Analyzed Analyzed - Analysis Complete

Remote Code Execution in Oracle Hyperion Financial Management

Publication date: 2026-09-15

Last updated on: 2026-09-21

Assigner: Oracle

Description

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. While the vulnerability is in Oracle Hyperion Financial Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 9.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-21

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-87214

EUVD

EUVD-2026-79869

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	hyperion_financial_management	11.2.26.0.000

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle Hyperion Financial Management version 11.2.26.0.000. It allows a high privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to full takeover of the product.

Detection Guidance

Detection of CVE-2026-87214 requires checking for vulnerable versions of Oracle Hyperion Financial Management (11.2.26.0.000) and monitoring for unauthorized access attempts via HTTP. Review Oracle's security advisories for patches or mitigations. Inspect network traffic for suspicious activity targeting the affected component.

Impact Analysis

An attacker could gain control of Oracle Hyperion Financial Management, potentially leading to unauthorized access, data theft, or disruption of financial management operations. The impact includes confidentiality, integrity, and availability breaches.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, which may violate compliance requirements under GDPR, HIPAA, or other regulations. Organizations using this software should assess potential compliance risks.

Mitigation Strategies

Immediately apply the latest security patches or updates provided by Oracle for Oracle Hyperion Financial Management version 11.2.26.0.000. Restrict network access to the HTTP interface to trusted sources only. Review and enforce strict access controls for high-privileged accounts.

Hi! I’m here to help you understand CVE-2026-87214. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70