High 1 exploited CVE NCSC-2026-0029 6 CVEs

Kwetsbaarheden verholpen in Oracle Hyperion

Published Jan 21, 2026 · Updated Jan 21, 2026 · nl

Vendor: Oracle Product: Hyperion Calculation Manager Product: Hyperion Financial Close Management Product: Hyperion Financial Management Product: Hyperion Financial Reporting Product: Hyperion Infrastructure Technology Product: Hyperion Planning Product: Hyperion Profitability and Cost Management Product: Planning and Budgeting Cloud Service

Summary

Oracle heeft kwetsbaarheden verholpen in verschillende subcomponenten van Hyperon producten.

Details

Interpretaties
De kwetsbaarheden stellen ongeauthenticeerde aanvallers in staat om systemen te compromitteren, Denial-of-Service aanvallen uit te voeren, en gevoelige gegevens aan te passen of te stelen.

Oplossingen
Oracle heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.

Vulnerabilities 6

High 8.1

CVE-2025-27363 Exploited Public exploit EPSS 28%

An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) whe…

FreeType FreeType freetype freetype Debian Ubuntu Azure Linux Alpine

Mar 11, 2025
KEV May 6, 2025
Critical 9.1

CVE-2025-49796

Libxml: type confusion leads to denial of service (dos)

A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input file that can lead libxml to crash, resulting in a denial of …

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux Alpine

Jun 16, 2025
Medium 5.3

CVE-2025-48924 Public exploit

Apache Commons Lang, Apache Commons Lang: ClassUtils.getClass(...) can throw a StackOverflowError on very long inputs

Uncontrolled Recursion vulnerability in Apache Commons Lang. This issue affects Apache Commons Lang: Starting with commons-lang:commons-lang 2.0 to 2.6, and, from org.apache.commons:commons-lang3 3.0 before 3.18.0. The methods ClassUtils.getClass(...) can thr…

Apache Software Foundation Apache Commons Lang druid thingsboard-tb-node Debian Ubuntu Azure Linux Wolfi Maven

Jul 11, 2025
Medium 4.2

CVE-2026-21922

Vulnerability in the Oracle Planning and Budgeting Cloud Service product of Oracle Hyperion (component: EPM Agent). The…

Oracle Oracle Planning and Budgeting Cloud Service

Jan 20, 2026
Medium 4.2

CVE-2026-21979

Vulnerability in the Oracle Planning and Budgeting Cloud Service product of Oracle Hyperion (component: EPM Agent). The…

Oracle Oracle Planning and Budgeting Cloud Service

Jan 20, 2026
Low 2.9

CVE-2025-43967

libheif before 1.19.6 has a NULL pointer dereference in ImageItem_Grid::get_decoder in image-items/grid.cc because a gr…

struktur libheif libheif Debian

Apr 20, 2025

Revision history

2026-01-21 #1.0.0
Initiele versie

References

Reference
https://www.oracle.com/security-alerts/cpujan2026.html