Executive brief
Oracle Hyperion Financial Management is an enterprise financial planning and consolidation system used by large organizations to manage budgets, reports, and financial close processes. A vulnerability in its security component allows a low-privileged user with network access to gain complete control over the system, potentially exposing or modifying critical financial data and reports.
Technical details
This is a difficult-to-exploit vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.25.0.000, requiring a low-privileged attacker with network access via HTTP. The vulnerability allows an authenticated attacker to escalate privileges and achieve complete system compromise, including impacts to confidentiality, integrity, and availability. The attack requires specific conditions (high complexity) but does not require user interaction once the attacker has low-level access. Patch availability is not specified in the advisory.
Affected products
- Oracle Hyperion Financial Management 11.2.25.0.000
Timeline
- 2026-08-18: disclosed