CVE-2026-62576: Medium severity Oracle Oracle Hyperion Infrastructure Technology vulnerability
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Hyperion Infrastructure Technology. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Infrastructure Technology accessible data as well as unauthorized update, insert or delete access to some of Oracle Hyperion Infrastructure Technology accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N).
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
An attacker does not need credentials or user interaction, but must have network access to the affected product via TLS. Exploitation is rated difficult, with high attack complexity.
Which deployments are known to be affected?
The affected supported version is Oracle Hyperion Infrastructure Technology 11.2.25.0.000, specifically its Installation and Configuration component. The available information does not state whether other versions or default configurations are affected.
What could a successful attack allow?
A successful attack can expose critical data or all data accessible through Oracle Hyperion Infrastructure Technology. It can also allow unauthorized update, insert, or delete operations on some accessible data.