This vulnerability affects Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. It permits an unauthenticated attacker with network access via HTTP to compromise the system, potentially leading to full takeover. The CVSS 3.1 base score is 8.1, indicating high severity with impacts on confidentiality, integrity, and availability. The attack complexity is high, and no privileges or user interaction are required. Oracle's August 2026 Critical Security Patch Update advisory references this vulnerability but does not explicitly state patch availability for this product version in the provided excerpt.

Successful exploitation can result in complete compromise of Oracle Hyperion Financial Reporting, affecting confidentiality, integrity, and availability of the system. The vulnerability is rated high severity with a CVSS score of 8.1. No known exploits in the wild have been reported at this time.

Oracle recommends applying security patches promptly and staying on actively-supported versions. The August 2026 Critical Security Patch Update advisory includes this vulnerability among many others. However, the provided advisory content does not explicitly confirm patch availability or a fix for Oracle Hyperion Financial Reporting version 11.2.25.0.000. Users should consult the official Oracle advisory at https://www.oracle.com/security-alerts/cspuaug2026.html for the latest patch information and apply any relevant updates as soon as they become available.