Description

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "7.2",
  "pubDate": "2026-08-18T21:17:38.790Z",
  "pubdate": "2026-08-18T21:17:38.790Z",
  "executiveSummary": "An easily exploitable vulnerability exists within the Security component of the Oracle Hyperion Financial Management product, specifically affecting version 11.2.25.0.000. This vulnerability permits a highly privileged malicious actor with network access via the HTTP protocol to compromise the targeted system entirely.\nSuccessful exploitation of this security flaw results in a complete system takeover, yielding severe impacts across all three pillars of the CIA triad: Confidentiality, Integrity, and Availability. The Common Vulnerability Scoring System (CVSS) version 3.1 assigns this issue a base score of 7.2, reflecting the high severity of potential damage despite the requirement for elevated privileges.\nThe risk implications are critical for organizations utilizing the affected financial management infrastructure, as a successful compromise allows unauthorized administrative control over sensitive corporate financial data and operational processes. The primary prerequisite for an attack is prior possession of high privileges within the application combined with network reachability over HTTP.",
  "technicalDetails": "The vulnerability resides in the Security component of Oracle Hyperion Financial Management version 11.2.25.0.000. The architecture exposes administrative functionality via the HTTP protocol, making the attack surface accessible over the network to any entity possessing network routing to the service.\nTo initiate an attack, the threat actor must already possess high privileges within the Oracle Hyperion Financial Management environment. Leveraging these elevated credentials, the attacker interacts with vulnerable administrative endpoints exposed by the Security component over HTTP.\nThe root cause stems from insufficient validation, improper authorization checks, or flawed security controls within the affected Security component's request-handling mechanisms. These weaknesses allow an authenticated administrator to bypass intended security boundaries or abuse legitimate administrative functions to execute unauthorized operations.\nThe attack flow proceeds as follows: First, the attacker establishes network connectivity to the vulnerable Oracle Hyperion Financial Management server via HTTP. Second, utilizing pre-acquired high-privileged credentials, the attacker authenticates to the application interface. Third, the attacker crafts and transmits a malicious payload or specially crafted request targeted at the Security component. Fourth, the vulnerable component processes the request without adequate validation or restriction, leading to unintended code execution, privilege escalation, or full administrative control over the underlying application infrastructure.\nThe post-exploitation impact includes the total takeover of Oracle Hyperion Financial Management. An attacker who achieves a complete takeover can manipulate financial data, compromise system integrity, disrupt service availability, and pivot further into the enterprise network if the affected server shares trust boundaries with other internal systems."
}