This vulnerability affects Oracle Hyperion Financial Management 11.2.25.0.000 and involves a security flaw that can be exploited remotely without authentication via HTTP. Successful exploitation requires user interaction from a third party and can lead to unauthorized modification of data (update, insert, delete) and partial denial of service conditions. The CVSS 3.1 base score is 4.2, reflecting medium severity with impacts on integrity and availability but no confidentiality impact. No official remediation level or patch information is provided in the vendor advisory, but Oracle strongly recommends applying security patches promptly as part of their Critical Security Patch Update program.

An attacker with network access via HTTP could, with difficulty and requiring user interaction, perform unauthorized data modifications and cause partial denial of service in Oracle Hyperion Financial Management 11.2.25.0.000. There is no confidentiality impact. The vulnerability affects data integrity and system availability to a limited extent.

Oracle's advisory does not specify a dedicated patch for this vulnerability alone but includes it within their August 2026 Critical Security Patch Update. Oracle recommends customers remain on actively supported versions and apply all available security patches without delay. Patch status is not explicitly confirmed for this version; users should consult the Oracle Critical Security Patch Update advisory at https://www.oracle.com/security-alerts/cspuaug2026.html for current remediation guidance.