Executive brief
Oracle Hyperion Financial Management is a financial planning and consolidation platform used by enterprises to manage budgets, forecasts, and financial reporting. An unauthenticated attacker over the network can exploit a security flaw to view, modify, or delete critical financial data without authorization, potentially compromising financial records, regulatory compliance, and operational integrity.
Technical details
A difficult-to-exploit authentication bypass vulnerability exists in the Security component of Oracle Hyperion Financial Management 11.2.26.0.000. The vulnerability is accessible over HTTP to unauthenticated attackers with network access and requires high attack complexity. Successful exploitation allows unauthorized access to create, read, modify, or delete critical financial data. The vendor has published information regarding this issue and patch status should be verified on Oracle's security advisories page.
Affected products
- Oracle Hyperion Financial Management 11.2.26.0.000
Timeline
- 2026-09-15: disclosed