This vulnerability affects Oracle Hyperion Calculation Manager 11.2.25.0.000 and involves a security weakness in the product's security component. An attacker with low privileges but physical access to the communication segment of the hardware can exploit the flaw to gain unauthorized update, insert, or delete capabilities on some data accessible by the product. The CVSS vector indicates the attack requires adjacent network access (AV:A), high attack complexity (AC:H), low privileges (PR:L), no user interaction (UI:N), and impacts integrity only (I:L) without affecting confidentiality or availability.

The impact is limited to unauthorized modification of some data within Oracle Hyperion Calculation Manager. There is no impact on confidentiality or availability. The attack requires physical access to the communication segment, making exploitation difficult. The overall severity is low.

The vendor advisory does not explicitly state that a patch is available for this specific vulnerability. The Oracle Critical Security Patch Update (August 2026) advisory recommends applying available security patches promptly to mitigate vulnerabilities. Since no direct patch link or fix is provided for this CVE, patch status is not yet confirmed—check the Oracle advisory for current remediation guidance. Customers should ensure they apply Oracle's Critical Security Patch Updates without delay and maintain supported product versions.