This vulnerability affects Oracle Hyperion Infrastructure Technology component Common Security in version 11.2.25.0.000. It is exploitable remotely over HTTPS by unauthenticated attackers but is considered difficult to exploit. The impact includes unauthorized creation, deletion, or modification of critical data or complete access to all data accessible by the affected product. The CVSS vector indicates network attack vector, high attack complexity, no privileges required, no user interaction, unchanged scope, and high confidentiality and integrity impacts.

An attacker exploiting this vulnerability could gain unauthorized access to critical data or perform unauthorized creation, deletion, or modification of data within Oracle Hyperion Infrastructure Technology. This compromises confidentiality and integrity of the data but does not affect availability. The vulnerability could lead to significant data breaches or data manipulation within the affected environment.

Oracle has released this vulnerability as part of its August 2026 Critical Security Patch Update. Customers are strongly advised to apply the relevant security patches without delay. The vendor advisory emphasizes the importance of remaining on actively supported versions and promptly applying Oracle patches to mitigate exploitation risks. No specific patch link for this product version was provided in the input, so users should consult the Oracle Critical Security Patch Update advisory at https://www.oracle.com/security-alerts/cspuaug2026.html for patch availability and installation instructions.