This vulnerability affects Oracle Hyperion Financial Management component Security in version 11.2.25.0.000. An attacker with high privileges and logon access to the infrastructure can exploit this flaw to cause a partial denial of service condition. The CVSS 3.1 base score is 1.9, reflecting low impact limited to availability. No confidentiality or integrity impacts are reported. The vulnerability is considered difficult to exploit due to required conditions. No vendor advisory explicitly states patch availability or remediation status for this specific vulnerability, but it is listed in Oracle's August 2026 Critical Security Patch Update advisory, which contains numerous patches across Oracle products. The advisory strongly recommends applying patches promptly to mitigate known vulnerabilities.

The impact is limited to partial denial of service on Oracle Hyperion Financial Management, affecting availability only. There is no impact on confidentiality or integrity. Exploitation requires high privileges and infrastructure logon, making it difficult to exploit. No known active exploits are reported.

Oracle's August 2026 Critical Security Patch Update advisory recommends applying available security patches promptly. Although no specific patch link or explicit remediation level is provided for this vulnerability, customers should ensure they apply the latest Oracle patches for Oracle Hyperion Financial Management version 11.2.25.0.000. Maintaining up-to-date patched versions is the primary mitigation. No vendor advisory states that no action is required or that the issue is already mitigated.