Executive brief
Oracle Hyperion Financial Management is an enterprise financial planning and consolidation system used by large organizations to manage budgets, forecasts, and financial reporting. A vulnerability in its security component allows a low-privileged user with network access to gain complete control over the system, potentially exposing or modifying sensitive financial data and disrupting critical business operations.
Technical details
The vulnerability is an easily exploitable privilege escalation flaw in the security component of Oracle Hyperion Financial Management version 11.2.26.0.000. The vulnerability is reachable over HTTP from the network and requires only low-privilege authentication to exploit; no user interaction is needed. A successful attack allows an authenticated attacker to compromise the entire application, achieving unauthorized access to confidential financial data, the ability to modify records, and potential denial of service. The patch or mitigation status is not detailed in the available advisory information.
Affected products
- Oracle Hyperion Financial Management 11.2.26.0.000
Timeline
- 2026-09-15: disclosed
- 2026-09-15: advisory