This vulnerability affects Oracle Hyperion Financial Management 11.2.25.0.000 and involves a security flaw in the product's security component. An attacker with high privileges and network access via HTTP can exploit this issue to read unauthorized data subsets and cause a partial denial of service. The CVSS 3.1 vector indicates network attack vector, high attack complexity, required high privileges, no user interaction, unchanged scope, low confidentiality impact, no integrity impact, and low availability impact.

Successful exploitation results in unauthorized read access to a subset of data accessible by Oracle Hyperion Financial Management and the ability to cause a partial denial of service. The impact is limited to confidentiality and availability with low severity, and no integrity impact is noted.

Oracle strongly recommends applying security patches without delay. However, no specific patch or fix for this vulnerability is explicitly stated in the advisory. Patch status is not yet confirmed — check the Oracle advisory at https://www.oracle.com/security-alerts/cspuaug2026.html for current remediation guidance and patch availability.