The vulnerability is an easily exploitable flaw in the security component of Oracle Hyperion Financial Management that permits a physical communication segment attached to the hardware running the application to compromise the system. Successful exploitation can lead to full takeover of the application, resulting in confidentiality, integrity, and availability impacts as indicated by the CVSS 3.1 vector (C:H/I:H/A:H). The weakness remains in the range of improper access control, allowing the attacker to bypass expected limitations and gain full control of the application.

Oracle Hyperion Financial Management version 11.2.26.0.000 is affected. No other versions or product variants are listed as impacted.

The CVSS base score of 8.0 signals a high severity risk. The EPSS score is < 1%, and the vulnerability is not listed in CISA’s KEV catalog. The likely attack vector is local, requiring the attacker to have proximity or physical network connectivity to the server hardware. The flaw is considered easily exploitable; an attacker with minimal privileges on the shared communication medium can achieve full control of the application, potentially compromising sensitive financial data and disrupting business operations.