High 1 exploited CVE WID-SEC-2026-0170 6 CVEs

Oracle Hyperion: Mehrere Schwachstellen

Published Jan 20, 2026 · Updated Jan 20, 2026 · de-DE

Vendor: Oracle Product: Hyperion Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Hyperion ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Product

Oracle Hyperion bietet Lösungen für Business Intelligence, Planung und Konsolidierung.

Vulnerabilities 6

High 8.1

CVE-2025-27363 Exploited Public exploit EPSS 28%

An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) whe…

FreeType FreeType freetype freetype Debian Ubuntu Azure Linux Alpine

Mar 11, 2025
KEV May 6, 2025
Critical 9.1

CVE-2025-49796

Libxml: type confusion leads to denial of service (dos)

A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input file that can lead libxml to crash, resulting in a denial of …

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux Alpine

Jun 16, 2025
Medium 5.3

CVE-2025-48924 Public exploit

Apache Commons Lang, Apache Commons Lang: ClassUtils.getClass(...) can throw a StackOverflowError on very long inputs

Uncontrolled Recursion vulnerability in Apache Commons Lang. This issue affects Apache Commons Lang: Starting with commons-lang:commons-lang 2.0 to 2.6, and, from org.apache.commons:commons-lang3 3.0 before 3.18.0. The methods ClassUtils.getClass(...) can thr…

Apache Software Foundation Apache Commons Lang druid thingsboard-tb-node Debian Ubuntu Azure Linux Wolfi Maven

Jul 11, 2025
Medium 4.2

CVE-2026-21922

Vulnerability in the Oracle Planning and Budgeting Cloud Service product of Oracle Hyperion (component: EPM Agent). The…

Oracle Oracle Planning and Budgeting Cloud Service

Jan 20, 2026
Medium 4.2

CVE-2026-21979

Vulnerability in the Oracle Planning and Budgeting Cloud Service product of Oracle Hyperion (component: EPM Agent). The…

Oracle Oracle Planning and Budgeting Cloud Service

Jan 20, 2026
Low 2.9

CVE-2025-43967

libheif before 1.19.6 has a NULL pointer dereference in ImageItem_Grid::get_decoder in image-items/grid.cc because a gr…

struktur libheif libheif Debian

Apr 20, 2025

Revision history

2026-01-20 #1
Initiale Fassung

References

Oracle Critical Patch Update Advisory - January 2026 - Appendix Oracle Hyperion vom 2026-01-20
https://www.oracle.com/security-alerts/cpujan2026.html#AppendixHYP