This vulnerability affects Oracle Hyperion Infrastructure Technology component Installation and Configuration in version 11.2.25.0.000. An attacker with high privileges and logon access to the infrastructure where the product runs can exploit this flaw to compromise the product by unauthorized modification of accessible data and causing partial denial of service. The CVSS 3.1 base score is 3.0 with vector AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L, indicating local attack vector, high attack complexity, high privileges required, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and low availability impact.

Successful exploitation can lead to unauthorized update, insert, or delete access to some data accessible by Oracle Hyperion Infrastructure Technology and cause a partial denial of service affecting availability. There is no confidentiality impact. The attack requires high privileges and local access, making exploitation difficult.

The vendor advisory does not explicitly mention a patch for this specific vulnerability in the provided content. Patch status is not yet confirmed — check the Oracle advisory at https://www.oracle.com/security-alerts/cspuaug2026.html for current remediation guidance. Oracle strongly recommends applying security patches promptly and staying on actively supported versions to mitigate known vulnerabilities.