Description

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Hyperion Data Relationship Management. While the vulnerability is in Oracle Hyperion Data Relationship Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Data Relationship Management. CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "10.0",
  "pubDate": "2026-08-18T21:17:44.490Z",
  "pubdate": "2026-08-18T21:17:44.490Z",
  "executiveSummary": "A critical vulnerability exists within the Access and security component of the Oracle Hyperion Data Relationship Management product, specifically affecting version 11.2.25.0.000. This remotely exploitable flaw carries a maximum CVSS v3.1 base score of 10.0, indicating extreme risk across confidentiality, integrity, and availability.\nThe vulnerability allows an unauthenticated threat actor with network access via TCP to execute attacks without requiring user interaction or prior privileges. Due to a security scope change, successful exploitation extends beyond the primary application and can significantly impact additional integrated or dependent products.\nThe primary impact of this vulnerability is a complete system takeover of Oracle Hyperion Data Relationship Management, granting unauthorized administrative control to the attacker. Given the ease of exploitation and the lack of required authentication, organizations running the affected version face severe operational and security risks requiring immediate remediation.",
  "technicalDetails": "The vulnerability resides in the Access and security component of Oracle Hyperion Data Relationship Management version 11.2.25.0.000. The underlying root cause involves inadequate validation and access control enforcement within the network-exposed communication channels handled by the affected component.\nExploitation of this flaw requires network connectivity via the TCP protocol. Because the vulnerability requires zero privileges and no user interaction, an unauthenticated remote attacker can directly target the service listening on the network.\nThe attack flow proceeds as follows: First, the attacker establishes a TCP connection to the vulnerable Oracle Hyperion Data Relationship Management service endpoint. Second, the attacker transmits a specially crafted network payload designed to exploit the access and security validation flaws. Third, due to insufficient input sanitization and authorization checks, the application processes the malicious payload, bypassing security boundaries.\nBecause of the scope change (S:C) defined in the CVSS vector, successful execution of the payload allows the attacker to break out of the immediate application security context, potentially compromising underlying operating system resources and additional collateral products integrated within the environment.\nPost-exploitation impact culminates in a full system takeover of Oracle Hyperion Data Relationship Management. The attacker achieves unrestricted access to sensitive master data hierarchies, application configurations, and administrative privileges, enabling total control over confidentiality, integrity, and availability metrics."
}