Known vulnerabilities in Financial Reporting
Vendor:
Oracle
Software:
Financial Reporting
Software CPE:
cpe:2.3:a:oracle:oracle_hyperion_financial_reporting:*:*:*:*:*:*:*:*
Website:
https://www.oracle.com
Total vulnerabilities:
14
Public exploits:
2
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (14)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU121717 - Improper input validation CVE-2025-43967 |
CWE-20 | Medium | - | 20.01.2026 | - | ||
| #VU113607 - Uncontrolled Recursion CVE-2025-48924 |
CWE-674 | Medium | - | 04.08.2025 | - | ||
| #VU112935 - Improper input validation CVE-2025-50108 |
CWE-20 | Medium | - | 16.07.2025 | - | ||
| #VU105715 - Out-of-bounds write CVE-2025-27363 |
CWE-787 | Critical | - | 14.03.2025 | - | ||
| #VU80018 - Server-Side Request Forgery (SSRF) CVE-2022-44729 |
CWE-918 | Medium | - | 25.08.2023 | - | ||
| #VU121926 - Improper input validation CVE-2023-22062 |
CWE-20 | High | - | 18.07.2023 | - | ||
| #VU65639 - Out-of-bounds write CVE-2022-27404 |
CWE-787 | High | - | 21.07.2022 | - | ||
| #VU29068 - Server-Side Request Forgery (SSRF) CVE-2019-17566 |
CWE-918 | Medium | - | 16.06.2020 | - | ||
| #VU28683 - Improper input validation CVE-2019-2959 |
CWE-20 | Low | - | 05.06.2020 | - | ||
| #VU27218 - Improper input validation CVE-2020-2769 |
CWE-20 | Low | - | 23.04.2020 | - | ||
| #VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-11022 |
CWE-79 | Low | - | 21.04.2020 | - | ||
| #VU38037 - Improper input validation CVE-2017-10358 |
CWE-20 | Medium | - | 19.10.2017 | - | ||
| #VU38049 - Exposure of sensitive information to an unauthorized actor CVE-2017-10310 |
CWE-200 | Medium | - | 19.10.2017 | - | ||
| #VU178 - Permissions, Privileges, and Access Controls CVE-2016-3493 |
CWE-264 | Critical | - | 20.07.2016 | - |