This vulnerability affects Oracle Hyperion Infrastructure Technology component Installation and Configuration in version 11.2.25.0.000. It is easily exploitable remotely without authentication over HTTP. Successful exploitation results in unauthorized ability to read, modify, or delete some accessible data and cause partial denial of service. The CVSS vector is AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L, indicating network attack vector, low attack complexity, no privileges or user interaction required, and impacts on confidentiality, integrity, and availability. Oracle's August 2026 Critical Security Patch Update advisory references many patches but does not explicitly confirm a fix for this CVE in the provided excerpt. The vendor strongly recommends applying security patches promptly.

An unauthenticated attacker with network access can compromise Oracle Hyperion Infrastructure Technology 11.2.25.0.000 to gain unauthorized read and write access to some data, including update, insert, and delete operations. Additionally, the attacker can cause a partial denial of service, impacting availability. This can lead to data confidentiality breaches, data integrity violations, and service disruption.

Oracle has released a Critical Security Patch Update advisory in August 2026 covering many vulnerabilities. Although the advisory does not explicitly confirm a patch for CVE-2026-62551 in the provided content, Oracle strongly recommends that customers remain on actively supported versions and apply security patches without delay. Users of Oracle Hyperion Infrastructure Technology 11.2.25.0.000 should monitor Oracle's official security advisories and apply any relevant patches as soon as they become available. Patch status is not yet confirmed—check the vendor advisory for current remediation guidance.