Known vulnerabilities in Hyperion Planning

Known vulnerabilities in Hyperion Planning

Vendor: Oracle

Software: Hyperion Planning

Software CPE: cpe:2.3:a:oracle:hyperion_planning:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 11

Public exploits: 1

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (11)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU113607 - Uncontrolled Recursion CVE-2025-48924	CWE-674	Medium	No	No	-	04.08.2025	SB2025080422 SB2025080423 SB2025080427 and 182 more
#VU111165 - Improper Access Control CVE-2025-48734	CWE-284	Medium	No	No	-	16.06.2025	SB2025061643 SB2025061644 SB2025061645 and 141 more
#VU82276 - Allocation of Resources Without Limits or Throttling CVE-2023-5072	CWE-770	Medium	No	No	-	20.10.2023	SB2023102017 SB2023102018 SB2023113056 and 97 more
#VU59936 - Improper input validation CVE-2021-42575	CWE-20	High	No	No	-	23.01.2022	SB2022012333 SB2022072039 SB2022071971 and 5 more
#VU59098 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44832	CWE-94	Medium	No	No	11.2.8.0	28.12.2021	SB2021122816 SB2021123002 SB2022010601 and 197 more
#VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-29425	CWE-22	Low	No	No	-	15.04.2021	SB2021041510 SB2021081922 SB2021093016 and 121 more
#VU48046 - Improper input validation CVE-2020-14764	CWE-20	Low	No	No	-	30.10.2020	SB2020103011
#VU24597 - Improper input validation CVE-2019-2904	CWE-20	High	No	No	-	25.01.2020	SB2020011463 SB2020042108 SB2020042109 and 20 more
#VU20844 - Protection Mechanism Failure CVE-2019-10086	CWE-693	Low	No	No	-	04.09.2019	SB2019090405 SB2019090406 SB2019121902 and 112 more
#VU35669 - Improper Access Control CVE-2019-2770	CWE-284	Low	No	No	-	24.07.2019	SB2019072471 SB20190716119
#VU35685 - Improper Access Control CVE-2019-2861	CWE-284	Low	Available	No	-	24.07.2019	SB2019072471 SB20190716119