CVE-2026-87220
Received Received - Intake

Denial of Service in Oracle Hyperion Financial Management

Publication date: 2026-09-15

Last updated on: 2026-09-15

Assigner: Oracle

Description
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Hyperion Financial Management as well as unauthorized update, insert or delete access to some of Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 7.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-15
Last Modified
2026-09-15
Generated
2026-09-15
AI Q&A
2026-09-15
EPSS Evaluated
N/A
NVD
CVE-2026-87220
EUVD
EUVD-2026-79875

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
oracle hyperion_financial_management 11.2.26.0.000

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a vulnerability in Oracle Hyperion Financial Management (version 11.2.26.0.000) that allows an unauthenticated attacker with access to the physical network segment where the software runs to exploit it. The flaw enables unauthorized actions such as causing the system to crash repeatedly (denial of service) or modifying some data within the application.

Detection Guidance

Detection requires identifying Oracle Hyperion Financial Management version 11.2.26.0.000 on your network. Check installed software versions and network segments where this system operates. Monitor for unusual crashes or hangs in the application.

Impact Analysis

If exploited, this vulnerability could lead to system downtime due to crashes, disrupting financial management operations. It may also allow attackers to alter certain data, potentially leading to incorrect financial reporting or data integrity issues.

Compliance Impact

This vulnerability could impact compliance by causing data integrity issues or system unavailability, which may violate requirements for data accuracy and availability in regulations like GDPR and HIPAA. Unauthorized data changes or downtime could lead to non-compliance penalties.

Mitigation Strategies

Apply Oracle's official patches or updates for this version immediately. Isolate the Oracle Hyperion Financial Management system from untrusted networks. Restrict physical and network access to only authorized personnel.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-87220. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart