This vulnerability affects Oracle Hyperion Calculation Manager 11.2.25.0.000 and involves a security flaw in the product's security component. An unauthenticated attacker with network access via HTTP can exploit this vulnerability, but successful exploitation requires user interaction by a third party. The impact is limited to unauthorized read access to a subset of accessible data. The CVSS 3.1 base score is 3.1, reflecting low severity with confidentiality impact only. No known exploits are reported in the wild. Oracle has not explicitly stated patch availability for this specific vulnerability in the provided advisory, but it is included in the August 2026 Critical Security Patch Update which contains numerous fixes across Oracle products.

Successful exploitation can lead to unauthorized read access to some data within Oracle Hyperion Calculation Manager, potentially exposing sensitive information. There is no impact on data integrity or system availability. Exploitation is difficult and requires user interaction, reducing the likelihood of widespread exploitation.

Oracle strongly recommends applying the August 2026 Critical Security Patch Update, which includes fixes for this and many other vulnerabilities. Customers should remain on actively supported versions and apply security patches promptly. No specific temporary mitigations or workarounds are detailed in the advisory. Patch status is not explicitly confirmed for this exact version and vulnerability, so users should consult the Oracle advisory for the latest patch availability and installation instructions.