This vulnerability affects the Deployment component of Oracle Hyperion Profitability and Cost Management version 11.2.25.0.000. It is easily exploitable by a high privileged attacker with network access via HTTP, enabling compromise of the product. The CVSS 3.1 vector (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) reflects network attack vector, low attack complexity, high privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. The vulnerability can lead to complete takeover of the affected system.

Successful exploitation allows an attacker with high privileges and network access to fully compromise Oracle Hyperion Profitability and Cost Management, impacting confidentiality, integrity, and availability of the system.

Oracle has released this vulnerability as part of their August 2026 Critical Security Patch Update. Customers are strongly advised to apply the relevant security patches promptly. The vendor advisory emphasizes the importance of applying available patches without delay to prevent exploitation. No indication of temporary fixes or workarounds is provided; applying the official patch is the recommended mitigation.