Executive brief
Oracle Hyperion Financial Management is an enterprise financial planning and consolidation application used by large organizations to manage corporate accounting and reporting. This vulnerability allows a high-privileged attacker with network access to read sensitive financial data and disrupt service availability, potentially exposing confidential accounting information or temporarily rendering the system unavailable.
Technical details
A difficult-to-exploit vulnerability exists in the Security component of Oracle Hyperion Financial Management version 11.2.25.0.000. The vulnerability allows a high-privileged attacker with network access via HTTP to achieve partial information disclosure and partial denial of service. Attack success requires high privilege level and challenging exploitation conditions (high complexity). The vulnerability results in unauthorized read access to a subset of accessible data within the application and partial loss of availability. Patch status and remediation details are not currently available from the accessible advisory sources.
Affected products
- Oracle Hyperion Financial Management 11.2.25.0.000
Timeline
- 2026-08-18: disclosed