This vulnerability affects Oracle Hyperion Data Relationship Management component Access and security in version 11.2.25.0.000. An unauthenticated attacker with network access via HTTP can exploit this flaw, which is difficult to exploit, to compromise the system. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or full access to all data accessible by the product. The CVSS 3.1 vector indicates network attack vector, high attack complexity, no privileges required, no user interaction, unchanged scope, and high confidentiality and integrity impacts. The vendor advisory does not explicitly confirm patch availability or remediation status for this specific vulnerability but recommends applying security patches promptly.

Successful exploitation can result in unauthorized creation, deletion, or modification of critical data or complete unauthorized access to all data accessible by Oracle Hyperion Data Relationship Management version 11.2.25.0.000. This impacts confidentiality and integrity of data but does not affect availability. The vulnerability is rated high severity with a CVSS 3.1 score of 7.4.

The vendor advisory does not explicitly confirm the availability of a patch or remediation for this specific vulnerability. Oracle strongly recommends that customers remain on actively-supported versions and apply security patches without delay. Users of Oracle Hyperion Data Relationship Management version 11.2.25.0.000 should monitor Oracle's Critical Security Patch Update advisories and apply any relevant patches as soon as they become available. Patch status is not yet confirmed — check the vendor advisory at https://www.oracle.com/security-alerts/cspuaug2026.html for current remediation guidance.