Executive brief
Oracle Hyperion Financial Management is a financial consolidation and planning tool used by enterprises to manage budgets and financial reporting. A vulnerability in the Security component allows a low-privileged attacker with network access to partially disrupt the availability of the application, affecting financial operations and reporting timelines.
Technical details
This is a difficult-to-exploit vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.25.0.000. The flaw requires low privileges, network access via HTTP, and specific conditions to trigger (high attack complexity). A successful exploit results in a partial denial of service by impacting the Availability of the application. The attack does not compromise Confidentiality or Integrity. No additional user interaction is required. Oracle has released patches as part of their August 2026 security update.
Affected products
- Oracle Hyperion Financial Management 11.2.25.0.000
Timeline
- 2026-08-18: disclosed