This vulnerability affects Oracle Hyperion Data Relationship Management component 'Access and security' in version 11.2.25.0.000. It is easily exploitable by unauthenticated attackers over the network via HTTP but requires user interaction from a third party. The CVSS 3.1 base score is 8.1, reflecting high confidentiality and integrity impacts. Exploitation can result in unauthorized access and modification of critical data accessible through the product. No known exploits in the wild have been reported. Oracle has published a Critical Security Patch Update advisory recommending patching but no explicit patch link for this specific vulnerability was provided in the input data.

The vulnerability can lead to unauthorized creation, deletion, or modification of critical data within Oracle Hyperion Data Relationship Management. Confidentiality and integrity of data are highly impacted, potentially allowing attackers to gain unauthorized access to sensitive information. Availability impact is not indicated. Exploitation requires user interaction but no authentication.

Oracle strongly recommends applying security patches promptly as part of their Critical Security Patch Update program. Although no specific patch link was provided for this vulnerability, customers should review Oracle's August 2026 Critical Security Patch Update advisory and apply relevant patches for Oracle Hyperion Data Relationship Management version 11.2.25.0.000 without delay. Maintaining actively-supported versions and timely patching is critical to mitigate this vulnerability.