A vulnerability exists in the Lifecycle Management component of Oracle Hyperion Infrastructure Technology that allows a high‑privileged attacker with HTTP network access to compromise the system. Successful exploitation requires the attacker to obtain high privileges and user interaction from an external person, enabling unauthorized creation, deletion or modification of critical data, or unauthorized read access to a subset of data. The CV of 5.2 highlights impacts on confidentiality and integrity.

Oracle Corporation’s Hyperion Infrastructure Technology, version 11.2.24.0.000, is affected. No other versions are listed as impacted.

The risk is moderate (CVSS 5.2). Exploitation is possible over an HTTP interface, requiring a high‑privileged user and human interaction from a person other than the attacker, implying a social engineering component. The EPSS score is not available and the vulnerability is not listed in CISA KEV, suggesting a lower likelihood of widespread exploitation at present.