Executive brief
Oracle Hyperion Financial Management is a financial planning and consolidation tool used by enterprises to manage budgets and close operations. A vulnerability allows an authenticated user with network access to exploit a flaw in the security component, potentially accessing sensitive financial data without authorization or temporarily disrupting the service.
Technical details
This is an easily exploitable vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.25.0.000. The vulnerability can be exploited remotely over HTTP by a low-privileged authenticated attacker (PR:L) without user interaction. Successful exploitation results in confidentiality impact (unauthorized access to critical financial data), and a partial denial of service condition. The attack vector is network-based with no special access or conditions beyond valid credentials required.
Affected products
- Oracle Hyperion Financial Management 11.2.25.0.000
Timeline
- 2026-08-18: disclosed