Executive brief
Oracle Hyperion Financial Management is a financial planning and analysis platform used by enterprises to manage budgets and forecasting. A vulnerability in its Security component allows an attacker with basic network access and low-level user credentials to gain complete control over the system, compromising confidential financial data, modifying records, and disrupting operations.
Technical details
The vulnerability is an easily exploitable issue in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000 that allows privilege escalation. An attacker with low privileges and network access via HTTP can exploit this flaw without requiring user interaction. A successful exploit grants the attacker complete control over the Hyperion Financial Management system, affecting confidentiality, integrity, and availability of financial data. Oracle has not publicly disclosed patch details due to access restrictions on the advisory page.
Affected products
- Oracle Hyperion Financial Management 11.2.26.0.000
Timeline
- 2026-09-15: disclosed