This vulnerability affects Oracle Hyperion Financial Management 11.2.25.0.000 in the security component. An attacker with low privileges and network access via HTTP can exploit this flaw to cause a partial denial of service condition. The CVSS 3.1 base score is 3.1, reflecting low severity with an availability impact. There is no indication of confidentiality or integrity compromise. The vulnerability is considered difficult to exploit.

Successful exploitation results in unauthorized ability to cause a partial denial of service of Oracle Hyperion Financial Management. There is no impact on confidentiality or integrity. The attack requires network access and low privileges, with high attack complexity.

Oracle strongly recommends applying the security patches provided in their Critical Security Patch Update (CSPU) for August 2026. Customers should remain on actively-supported versions and apply security patches without delay. Patch availability is documented in the Oracle advisory at https://www.oracle.com/security-alerts/cspuaug2026.html. No specific patch link for this vulnerability was provided, so users should consult the advisory for patch details. There is no indication that the vulnerability is already mitigated or requires no action.