Executive brief
Oracle Hyperion Calculation Manager is a financial planning and analysis application used by enterprises to manage business calculations and data. A local vulnerability allows an attacker with access to the system running this application to read sensitive financial or planning data stored within it, compromising confidentiality of business-critical information.
Technical details
This is a local information disclosure vulnerability in the security component of Oracle Hyperion Calculation Manager version 11.2.25.0.000. The vulnerability requires unauthenticated local access to the infrastructure (system logon) and results in unauthorized read access to a subset of accessible data. No user interaction, network accessibility, or authentication to the application itself is required—only local system access. The attack surface is limited to operators or system administrators with local infrastructure access. A patch or update is assumed available from Oracle as part of their security update cycle.
Affected products
- Oracle Hyperion Calculation Manager 11.2.25.0.000
Timeline
- 2026-08-18: disclosed