Hyperion Financial Reporting
Vendor:
First CVE: Jul 21, 2016 · Active for 10 years
13
Total CVEs
More Total CVEs than 92% of tracked products
1.9
Avg CVEs / Year
Higher CVE frequency than 63% of tracked products
6.5
Avg CVSS
Higher Avg CVSS than 35% of tracked products
7.7%
KEV Rate
Higher KEV Rate than 98% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Hyperion Financial Reporting over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jul 21, 2016
10 years ago
Most Recent CVE
Jul 15, 2025
378 days ago
CVE Severity & Scoring
Hyperion Financial Reporting13 CVEs
54%
23%
15%
All CVEs353,173 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local2 (15.4%)
Network11 (84.6%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low12 (92.3%)
High1 (7.7%)
Unknown0 (0.0%)
User Interaction
None6 (46.2%)
Unknown0 (0.0%)
Required7 (53.8%)
Privileges Required
Low2 (15.4%)
High2 (15.4%)
None9 (69.2%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (13 CVEs).
13 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2020-11023MEDIUM In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's | Apr 29, 2020 | 6.1 | 95 | YES | YES |
CVE-2019-0228CRITICAL Apache PDFBox 2.0.14 does not properly initialize the XML parser, which allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted XFDF. | Apr 17, 2019 | 9.8 | 35 | NO | NO |
CVE-2016-3493CRITICAL Unspecified vulnerability in the Hyperion Financial Reporting component in Oracle Hyperion 11.1.2.4 allows remote attackers to affect confidentiality, integrity, and availability v | Jul 21, 2016 | 9.8 | 33 | NO | NO |
CVE-2019-17566HIGH Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href" attributes. By using a specially-crafted argument, an attacker co | Nov 12, 2020 | 7.5 | 29 | NO | NO |
CVE-2018-2907HIGH Vulnerability in the Hyperion Financial Reporting component of Oracle Hyperion (subcomponent: Security Models). The supported version that is affected is 11.1.2. Easily exploitable | Jul 18, 2018 | 8.6 | 25 | NO | NO |
CVE-2021-35665MEDIUM Vulnerability in the Hyperion Financial Reporting product of Oracle Hyperion (component: Repository). The supported version that is affected is 11.2.6.0. Easily exploitable vulnera | Oct 20, 2021 | 6.1 | 21 | NO | NO |
CVE-2021-27906MEDIUM A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions. | Mar 19, 2021 | 5.5 | 21 | NO | NO |
CVE-2021-27807MEDIUM A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions. | Mar 19, 2021 | 5.5 | 21 | NO | NO |
CVE-2017-10310HIGH Vulnerability in the Oracle Hyperion Financial Reporting component of Oracle Hyperion (subcomponent: Security Models). The supported version that is affected is 11.1.2. Easily expl | Oct 19, 2017 | 7.5 | 20 | NO | NO |
CVE-2017-10358MEDIUM Vulnerability in the Oracle Hyperion Financial Reporting component of Oracle Hyperion (subcomponent: Workspace). The supported version that is affected is 11.1.2. Easily exploitabl | Oct 19, 2017 | 6.4 | 19 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (13 CVEs).
CISA KEV
1 CVE
7.7% of CVEs· 98th percentile
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
7.7% of CVEs· 86th percentile
Social Chatter
Signals from CVEs in this product scope (13 CVEs).
Media Mentions
Signals from CVEs in this product scope (13 CVEs).
Top CNAs Publishing CVEs For Hyperion Financial Reporting
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 11.2.6.0 | 4 | 6.7 | 4.2% | 0 | 0 |
| 11.2.5.0 | 1 | 7.5 | 10.7% | 0 | 0 |
| 11.2.20.0.000 | 1 | 5.4 | 0.2% | 0 | 0 |
| 11.1.2.4 | 8 | 6.3 | 14.7% | 1 | 1 |
| 11.1.2 | 3 | 7.5 | 2.4% | 0 | 0 |