This vulnerability affects Oracle Hyperion Infrastructure Technology component Installation and Configuration in version 11.2.25.0.000. It permits a low privileged attacker with network access via HTTP to compromise the system, leading to potential takeover. The CVSS 3.1 base score is 8.8 with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. Oracle's August 2026 Critical Security Patch Update advisory references this vulnerability and recommends applying patches to mitigate the risk.

Successful exploitation allows an attacker with low privileges and network access via HTTP to fully compromise Oracle Hyperion Infrastructure Technology 11.2.25.0.000. This results in complete loss of confidentiality, integrity, and availability of the affected system.

Oracle has released a Critical Security Patch Update in August 2026 that addresses this vulnerability among others. Customers should apply the official patches provided by Oracle without delay. Oracle strongly recommends remaining on actively-supported versions and promptly applying security patches to prevent exploitation. Patch status is confirmed by the vendor advisory indicating that fixes are available.