This vulnerability affects Oracle Hyperion Infrastructure Technology component Common Security in version 11.2.25.0.000. It enables a low privileged attacker with network access via HTTP to compromise the system, resulting in unauthorized access to critical or all accessible data. The CVSS vector (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and high confidentiality impact without affecting integrity or availability. The vulnerability is listed in Oracle's August 2026 Critical Security Patch Update advisory.

Successful exploitation can lead to unauthorized access to critical data or complete access to all data accessible by Oracle Hyperion Infrastructure Technology version 11.2.25.0.000. The confidentiality impact is high, but there is no impact on integrity or availability. This could result in sensitive information disclosure.

Oracle has included this vulnerability in its August 2026 Critical Security Patch Update advisory. Customers are strongly recommended to apply the relevant security patches promptly as part of Oracle's Critical Security Patch Update process. No specific patch link was provided in the input data; therefore, users should consult the official Oracle advisory at https://www.oracle.com/security-alerts/cspuaug2026.html for patch availability and installation instructions. Maintaining actively supported versions and timely patching is critical to mitigate this vulnerability.