This vulnerability affects Oracle Hyperion Infrastructure Technology component Installation and Configuration in version 11.2.25.0.000. It is easily exploitable remotely without authentication over HTTP, allowing attackers to compromise the system fully. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) reflects that the attack requires no privileges or user interaction and impacts confidentiality, integrity, and availability severely. Oracle's August 2026 Critical Security Patch Update advisory references this vulnerability as part of a broad set of security fixes but does not explicitly confirm a dedicated patch for this specific version and product in the provided content.

Successful exploitation can lead to complete takeover of Oracle Hyperion Infrastructure Technology, impacting confidentiality, integrity, and availability of the affected system. This could allow attackers to execute arbitrary code, access sensitive data, and disrupt services.

Oracle strongly recommends applying security patches promptly as part of their Critical Security Patch Update program. Customers should ensure they are running actively supported versions and apply all relevant patches without delay. Since no explicit patch link for this vulnerability was provided, users should consult the Oracle August 2026 Critical Security Patch Update advisory and related patch availability documents for updates. No vendor advisory states that no action is required or that the issue is already mitigated.