Executive brief
Oracle Hyperion Financial Management is a financial planning and consolidation software used by enterprises to manage budgeting and reporting. A vulnerability in the security component allows a low-privileged network attacker to gain complete control of the system, compromising confidentiality, integrity, and availability of financial data and operations.
Technical details
A vulnerability exists in the Security component of Oracle Hyperion Financial Management that allows a low-privileged attacker with network access via HTTP to achieve complete system compromise. The vulnerability is difficult to exploit, requiring low-level privileges and specific conditions (high attack complexity), but once successful allows full takeover with impacts spanning confidentiality, integrity, and availability. The attack requires no user interaction and affects version 11.2.26.0.000. Patch availability is not explicitly confirmed in available details; refer to Oracle's security bulletin for mitigation guidance.
Affected products
- Oracle Hyperion Financial Management 11.2.26.0.000
Timeline
- 2026-09-15: disclosed