Executive brief
Oracle Hyperion Profitability and Cost Management is a financial planning and analysis platform used to manage profitability insights and cost allocation across enterprises. An unauthenticated network attacker can exploit this vulnerability to read, create, modify, or delete critical financial data without any credentials, potentially exposing sensitive business information and enabling fraudulent data manipulation.
Technical details
This is an authentication bypass vulnerability in the Deployment component of Oracle Hyperion Profitability and Cost Management version 11.2.25.0.000. The vulnerability allows unauthenticated attackers with network access via HTTP to gain unauthorized access to the application. No user interaction or authentication is required to exploit this flaw. Successful exploitation permits attackers to read, modify, or delete critical financial data and configuration information. The vulnerability affects only version 11.2.25.0.000 and patches are expected from Oracle's security updates.
Affected products
- Oracle Hyperion Profitability and Cost Management 11.2.25.0.000
Timeline
- 2026-08-18: disclosed