This vulnerability affects Oracle Hyperion Infrastructure Technology component Installation and Configuration in version 11.2.25.0.000. It is difficult to exploit and requires a high privileged attacker with infrastructure logon. The impact includes unauthorized update, insert, or delete access to some accessible data and the ability to cause a partial denial of service. The CVSS 3.1 vector is AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L, indicating local attack vector, high attack complexity, high privileges required, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and low availability impact. Oracle's August 2026 Critical Security Patch Update advisory references this vulnerability but does not explicitly state patch availability for this version. No known exploits in the wild have been reported.

An attacker with high privileges and logon access to the infrastructure can modify some accessible data unauthorizedly and cause partial denial of service to Oracle Hyperion Infrastructure Technology. There is no confidentiality impact. The overall impact is limited to integrity and availability with a low severity rating.

Oracle strongly recommends applying security patches promptly and remaining on actively supported versions. The August 2026 Critical Security Patch Update advisory covers this vulnerability among many others. However, explicit patch availability for Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 is not confirmed in the advisory content provided. Users should consult the official Oracle advisory at https://www.oracle.com/security-alerts/cspuaug2026.html for the latest patch status and apply updates as directed. No additional mitigation steps are specified.