CVE-2026-35244: Medium severity Oracle Oracle Hyperion Infrastructure Technology vulnerability
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Management). The supported version that is affected is 11.2.24.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Infrastructure Technology. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Infrastructure Technology accessible data as well as unauthorized read access to a subset of Oracle Hyperion Infrastructure Technology accessible data. CVSS 3.1 Base Score 5.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:N).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-35244?
CVE-2026-35244 is considered to be of high severity due to its potential for exploitation by high privileged attackers.
How do I fix CVE-2026-35244?
To fix CVE-2026-35244, update the Oracle Hyperion Infrastructure Technology to version 11.2.24.0.001 or later.
Who is affected by CVE-2026-35244?
CVE-2026-35244 affects users of Oracle Hyperion Infrastructure Technology version 11.2.24.0.000.
What are the risks associated with CVE-2026-35244?
The risks associated with CVE-2026-35244 include unauthorized access and potential compromise of sensitive data.
Is there a workaround for CVE-2026-35244?
There are no specific workarounds for CVE-2026-35244; applying the security update is the recommended action.