This vulnerability in Oracle Hyperion Data Relationship Management (version 11.2.25.0.000) allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized access to critical data or complete access to all accessible data, as well as unauthorized modification (update, insert, delete) of some data. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, high confidentiality impact, low integrity impact, and no availability impact. Oracle's August 2026 Critical Security Patch Update advisory references this vulnerability but does not provide explicit patch details for this version in the provided content.

The vulnerability enables unauthorized access to critical data and partial unauthorized modification of data in Oracle Hyperion Data Relationship Management 11.2.25.0.000. This can lead to data confidentiality breaches and integrity violations, potentially compromising sensitive business information managed by the product.

Oracle strongly recommends applying security patches promptly as part of their Critical Security Patch Update process. Although the advisory references this vulnerability, explicit patch availability for version 11.2.25.0.000 is not confirmed in the provided data. Users should consult the Oracle August 2026 Critical Security Patch Update advisory directly for the latest patch and remediation instructions and ensure they remain on actively supported versions with all security updates applied without delay.