Executive brief
Oracle Hyperion Financial Management is a financial planning and analysis solution used by enterprises to manage budgets and financial forecasts. A vulnerability in the product's security component allows a privileged attacker with network access to take over the system, potentially compromising all financial data, reports, and operations managed by the platform.
Technical details
This vulnerability in Oracle Hyperion Financial Management's Security component is easily exploitable via HTTP by an attacker with high privileges (e.g., administrative access). The flaw allows an authenticated high-privileged attacker to gain complete control over the Financial Management instance, resulting in compromise of confidentiality, integrity, and availability. The vulnerability affects version 11.2.25.0.000. Network access is required, but no user interaction is needed. A patch or update should be available from Oracle as of the August 2026 security advisory.
Affected products
- Oracle Hyperion Financial Management 11.2.25.0.000
Timeline
- 2026-08-18: disclosed