Executive brief
Oracle Hyperion Financial Management is an enterprise financial planning and consolidation platform used by large organizations to manage budgeting, forecasting, and financial reporting. A security flaw in version 11.2.25.0.000 allows a low-privileged user with network access to completely take over the application, gaining unauthorized access to all financial data and system functions.
Technical details
This is an authentication or authorization bypass vulnerability in the Security component of Oracle Hyperion Financial Management. The flaw is easily exploitable via HTTP by an attacker with low-level privileges and network access, requiring no user interaction. Successful exploitation allows complete system compromise with high impact to confidentiality (data exposure), integrity (data modification), and availability (service disruption). The vulnerability affects version 11.2.25.0.000; patch status and remediation guidance should be obtained from Oracle's security advisories.
Affected products
- Oracle Hyperion Financial Management 11.2.25.0.000
Timeline
- 2026-08-18: disclosed