Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-87220

Quick assessment

Affected

Oracle Corporation Oracle Hyperion Financial Management

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Oracle Hyperion Financial Management 产品（组件：Security）中存在一个漏洞。受影响的受支持版本为 11.2.26.0.000。该漏洞易于利用，允许未认证的、能够访问运行 Oracle Hyperion Financial Management 的硬件所连接的物理通信网段的攻击者，对 Oracle Hyperion Financial Management 造成破坏。成功利用此漏洞的攻击可能导致未授权地引发 Oracle Hyperion Financial Managem

CVSS 7.1 · High EPSS 0.34% · P26 Updated Sep 18, 2026

Possible ATT&CK Techniques 2 AI

T1485 · Data Destruction T1499 · Endpoint Denial of Service

Affected Version Matrix 1

Vendor	Product	Version Range	Status
Oracle Corporation	Oracle Hyperion Financial Management	`11.2.26.0.000`	affected

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Hyperion Financial Management as well as unauthorized update, insert or delete access to some of Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 7.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H).

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Oracle Corporation	Oracle Hyperion Financial Management	11.2.26.0.000	-

II. Public POCs for CVE-2026-87220

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-87220

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-87220 (1)

🔗 Oracle Critical Security Patch Update Advisory - September 2026 vendor-advisory

https://www.cve.org/CVERecord?id=CVE-2026-87220

Same Patch Batch · Oracle Corporation · 2026-09-15 · 634 CVEs total

CVE-2026-83020	10.0 CRITICAL	Oracle Fusion Middleware 12.2.1.4.0 远程代码执行漏洞
CVE-2026-83021	10.0 CRITICAL	WebLogic 12.2.1.4/14.1远程代码执行漏洞
CVE-2026-83059	10.0 CRITICAL	Oracle Internet Directory 12.2.1.4.0 未授权LDAP攻击
CVE-2026-71133	10.0 CRITICAL	Oracle Access Manager 授权问题漏洞
CVE-2026-83099	10.0 CRITICAL	Oracle Forms 授权问题漏洞
CVE-2026-87230	10.0 CRITICAL	Oracle Hyperion Financial Management 11.2.26.0.000 远程未授权访问漏洞
CVE-2026-83058	9.9 CRITICAL	Oracle Internet Directory 12.2.1.4.0 远程代码执行漏洞
CVE-2026-83057	9.9 CRITICAL	Oracle Internet Directory 12.2.1.4.0远程代码执行
CVE-2026-83055	9.9 CRITICAL	Oracle Internet Directory 12.2.1.4.0 远程接管漏洞
CVE-2026-83039	9.9 CRITICAL	Oracle WebCenter Portal 12.2.1.4/14.1.2.0 远程接管
CVE-2026-73948	9.9 CRITICAL	Oracle WebCenter Portal 安全漏洞
CVE-2026-83056	9.9 CRITICAL	Oracle Internet Directory 12.2.1.4.0/14.1.2.1.0 高危RCE
CVE-2026-73945	9.9 CRITICAL	Oracle Access Manager 安全漏洞
CVE-2026-87172	9.9 CRITICAL	Oracle Hyperion FMI 11.2.26.0.000 远程接管漏洞
CVE-2026-83038	9.9 CRITICAL	WebLogic Server 多个版本远程代码执行漏洞
CVE-2026-82999	9.9 CRITICAL	Oracle Fusion Middleware 12.2.1.4.0 远程接管漏洞
CVE-2026-82998	9.9 CRITICAL	Oracle Fusion Middleware 12.2/14.1远程代码执行漏洞
CVE-2026-83282	9.9 CRITICAL	Oracle BI 12.2.1.4远程代码执行漏洞
CVE-2026-82997	9.9 CRITICAL	Oracle SDP 12.2.1.4/14.1.2.0 远程代码执行
CVE-2026-83031	9.9 CRITICAL	Oracle WebCenter Sites 12.2.1.4及14.1.2.0远程接管漏洞

Showing top 20 of 634 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: Oracle Hyperion Financial Management

Same vendor: Oracle Corporation