This vulnerability affects Oracle Hyperion Financial Management component Security in version 11.2.25.0.000. It is easily exploitable remotely without authentication via HTTP, enabling attackers to compromise the system and access sensitive data. The CVSS vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) confirms network attack vector, low attack complexity, no privileges or user interaction required, and high confidentiality impact. Oracle has published this vulnerability as part of their August 2026 Critical Security Patch Update advisory but does not explicitly state the patch availability for this specific version in the provided advisory content.

Successful exploitation results in unauthorized access to critical or all data accessible through Oracle Hyperion Financial Management 11.2.25.0.000. There is no impact on integrity or availability reported. The vulnerability poses a high confidentiality risk due to the potential exposure of sensitive financial management data.

Oracle strongly recommends applying security patches promptly as part of their Critical Security Patch Update program. Although the advisory does not explicitly confirm a patch for this specific version, customers should consult the Oracle August 2026 Critical Security Patch Update advisory and apply any relevant patches for Oracle Hyperion Financial Management 11.2.25.0.000 without delay. Maintaining up-to-date software versions and applying Oracle's security patches is the primary mitigation.