CVE-2026-87184 – Oracle Hyperion Financial Management
“Thirteen critical flaws in the system that closes your books — every unpatched day puts the numbers your business reports at risk.”
This Oracle Hyperion Financial Management update fixes 13 vulnerabilities, and every one of them is rated Critical. CVE-2026-87230 has a CVSS score of 10.0, Critical severity. CVE-2026-87172 has a CVSS score of 9.9, Critical severity. CVE-2026-87184 and CVE-2026-87188 each have a CVSS score of 9.8, Critical severity. CVE-2026-87186 has a CVSS score of 9.6, Critical severity. CVE-2026-87170, CVE-2026-87173, CVE-2026-87175, CVE-2026-87176, CVE-2026-87189, CVE-2026-87214, CVE-2026-87217, and CVE-2026-87223 each have a CVSS score of 9.1, Critical severity.
Hyperion Financial Management handles consolidation and financial close, so a compromise reaches directly into an organization's most sensitive financial data and reporting. With a maximum score of 10.0 and the entire batch rated Critical, this update needs same-day deployment across all Hyperion Financial Management environments.
Key Details
- Affected Product
- Oracle Hyperion Financial Management
- Attack Vector
- Network
- Attack Complexity
- Low
- Privileges Required
- None
- User Interaction
- None
- CWE Classification
- CWE-89