This vulnerability in Oracle Hyperion Infrastructure Technology (version 11.2.25.0.000) permits a low privileged attacker who has logon access to the infrastructure where the product runs to compromise the system by unauthorized modification of accessible data (update, insert, or delete). The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) reflects that the attack requires local access with low complexity and privileges, no user interaction, and impacts integrity only. No confidentiality or availability impacts are noted. The vulnerability is in the Installation and Configuration component of the product.

Successful exploitation allows unauthorized modification (update, insert, delete) of some data accessible by Oracle Hyperion Infrastructure Technology. There is no impact on confidentiality or availability. The attacker must have low privileged logon access to the infrastructure hosting the product. The CVSS score of 3.3 indicates a low-severity integrity impact.

Oracle strongly recommends applying security patches promptly as part of their Critical Security Patch Update (CSPU) program. However, no specific patch or fix for this vulnerability is explicitly listed in the provided advisory content. Patch status is not yet confirmed—check the Oracle advisory at https://www.oracle.com/security-alerts/cspuaug2026.html for current remediation guidance. Customers should remain on actively supported versions and apply available security patches without delay.