This vulnerability affects Oracle Hyperion Calculation Manager 11.2.25.0.000 and involves unauthorized read access to a subset of accessible data. Exploitation requires physical access to the communication segment attached to the hardware where the product executes. The CVSS 3.1 base score is 3.1, reflecting low confidentiality impact with no integrity or availability impact. The attack vector is adjacent network (physical communication segment), attack complexity is high, and no privileges or user interaction are required.

Successful exploitation results in unauthorized read access to some data accessible by Oracle Hyperion Calculation Manager. There is no impact on data integrity or system availability. The attack requires physical access to the communication segment, making exploitation difficult.

Oracle strongly recommends applying security patches promptly. However, no specific patch for this vulnerability is explicitly listed in the provided advisory. Patch status is not yet confirmed—check the Oracle advisory at https://www.oracle.com/security-alerts/cspuaug2026.html for current remediation guidance. Given the difficulty of exploitation and physical access requirement, limiting physical access to the communication segment is advisable.