This vulnerability affects Oracle Hyperion Financial Management 11.2.25.0.000 and allows a low privileged attacker with network access via SQL to compromise the system. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or complete access to all data accessible by Oracle Hyperion Financial Management. The CVSS 3.1 base score is 8.1, indicating high severity, with impacts on confidentiality and integrity but no impact on availability. The vulnerability is identified as CWE-284 (Improper Access Control). Oracle's August 2026 Critical Security Patch Update advisory mentions many patches but does not explicitly confirm a fix for this exact version or vulnerability in the provided content.

Exploitation of this vulnerability can result in unauthorized creation, deletion, or modification of critical data or complete unauthorized access to all data accessible by Oracle Hyperion Financial Management 11.2.25.0.000. This compromises the confidentiality and integrity of the data but does not affect system availability. The vulnerability requires network access and low privileges but no user interaction.

Oracle strongly recommends applying security patches promptly and remaining on actively supported versions. The August 2026 Critical Security Patch Update advisory covers many vulnerabilities and should be reviewed for patch availability and installation instructions. However, the provided data does not explicitly confirm a patch for Oracle Hyperion Financial Management 11.2.25.0.000 for this vulnerability. Therefore, users should consult the Oracle advisory directly to verify patch status and apply any available updates without delay.