Known vulnerabilities in Financial Reporting

Known vulnerabilities in Financial Reporting

Vendor: Oracle

Software: Financial Reporting

Software CPE: cpe:2.3:a:oracle:oracle_hyperion_financial_reporting:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 14

Public exploits: 2

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (14)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU121717 - Improper input validation CVE-2025-43967	CWE-20	Medium	No	No	-	20.01.2026	SB20260120116 SB20260120160 SB20260422116
#VU113607 - Uncontrolled Recursion CVE-2025-48924	CWE-674	Medium	No	No	-	04.08.2025	SB2025080422 SB2025080423 SB2025080427 and 182 more
#VU112935 - Improper input validation CVE-2025-50108	CWE-20	Medium	No	No	-	16.07.2025	SB2025071659
#VU105715 - Out-of-bounds write CVE-2025-27363	CWE-787	Critical	Available	Exploited	-	14.03.2025	SB2025031402 SB2025031502 SB2025031750 and 97 more
#VU80018 - Server-Side Request Forgery (SSRF) CVE-2022-44729	CWE-918	Medium	No	No	-	25.08.2023	SB2023082528 SB2023100208 SB2023100306 and 25 more
#VU121926 - Improper input validation CVE-2023-22062	CWE-20	High	No	No	-	18.07.2023	SB2023071838
#VU65639 - Out-of-bounds write CVE-2022-27404	CWE-787	High	No	No	-	21.07.2022	SB2022072115 SB2022072116 SB2022072122 and 48 more
#VU29068 - Server-Side Request Forgery (SSRF) CVE-2019-17566	CWE-918	Medium	No	No	-	16.06.2020	SB2020061613 SB2020062304 SB2020072310 and 23 more
#VU28683 - Improper input validation CVE-2019-2959	CWE-20	Low	No	No	-	05.06.2020	SB2019101540
#VU27218 - Improper input validation CVE-2020-2769	CWE-20	Low	No	No	-	23.04.2020	SB2020042312
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-11022	CWE-79	Low	Available	No	-	21.04.2020	SB2020042126 SB2020052033 SB2020052103 and 181 more
#VU38037 - Improper input validation CVE-2017-10358	CWE-20	Medium	No	No	-	19.10.2017	SB2017101947
#VU38049 - Exposure of sensitive information to an unauthorized actor CVE-2017-10310	CWE-200	Medium	No	No	-	19.10.2017	SB2017101947
#VU178 - Permissions, Privileges, and Access Controls CVE-2016-3493	CWE-264	Critical	No	No	-	20.07.2016	SB2016072014