Executive brief
Oracle Hyperion Financial Management is a financial planning and consolidation system used by large enterprises to manage budgeting and reporting. An unauthenticated attacker can remotely exploit a security vulnerability to gain complete control of the system, compromising all financial data and operational availability.
Technical details
The vulnerability is an authentication bypass flaw in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. An unauthenticated attacker can exploit this weakness via HTTP network requests without requiring valid credentials or user interaction. Successful exploitation allows complete system takeover with high impact to confidentiality, integrity, and availability of financial data and processes. A patch or update is expected from Oracle.
Affected products
- Oracle Hyperion Financial Management 11.2.26.0.000
Timeline
- 2026-09-15: disclosed