This vulnerability affects Oracle Hyperion Financial Management 11.2.25.0.000 and involves a security flaw in the product's security component. It permits a low privileged attacker with network access via TCP to exploit the vulnerability easily, resulting in complete compromise of the system. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. Oracle's August 2026 Critical Security Patch Update advisory references multiple patches but does not explicitly confirm a patch for this version or vulnerability in the provided content.

Successful exploitation can lead to full takeover of Oracle Hyperion Financial Management, affecting confidentiality, integrity, and availability of the system. This could allow attackers to access sensitive financial data, alter information, or disrupt service operations.

Oracle strongly recommends applying security patches without delay and remaining on actively-supported versions. However, the provided advisory content does not explicitly confirm a patch for this specific vulnerability and version. Therefore, patch status is not yet confirmed — check the Oracle advisory at https://www.oracle.com/security-alerts/cspuaug2026.html for current remediation guidance.