This vulnerability affects Oracle Hyperion Infrastructure Technology 11.2.25.0.000, specifically in the Installation and Configuration component. It is easily exploitable by a low privileged attacker with network access via HTTP, enabling unauthorized creation, deletion, or modification of critical data or complete access to all accessible data within the product. The CVSS 3.1 base score is 8.1, reflecting high confidentiality and integrity impacts with no impact on availability. Oracle's August 2026 Critical Security Patch Update advisory references this vulnerability and emphasizes the importance of applying patches promptly.

Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or full access to all data accessible by Oracle Hyperion Infrastructure Technology 11.2.25.0.000. This compromises confidentiality and integrity of the affected system's data. There is no reported impact on system availability. No known exploits in the wild have been reported at this time.

Oracle has released a Critical Security Patch Update in August 2026 that addresses this vulnerability among others. Customers are strongly advised to apply the relevant patches promptly to mitigate the risk. No alternative mitigations or temporary fixes are indicated in the advisory. Staying on actively supported versions and applying security patches without delay is recommended by Oracle.