CVE-2026-62583: Low severity Oracle Oracle Hyperion Infrastructure Technology vulnerability
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hyperion Infrastructure Technology executes to compromise Oracle Hyperion Infrastructure Technology. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hyperion Infrastructure Technology accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hyperion Infrastructure Technology. CVSS 3.1 Base Score 3.0 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L).
Affected Software
Event History
Frequently Asked Questions
Which installations should be reviewed for exposure?
Review Oracle Hyperion Infrastructure Technology installations running supported version 11.2.25.0.000, specifically the Installation and Configuration component.
Does exploitation require an existing foothold?
Yes. The attacker must have high privileges and be logged on to the infrastructure where Oracle Hyperion Infrastructure Technology runs. The attack vector is local and exploitation is rated as high complexity.
What could a successful attacker do?
A successful attack could allow unauthorized update, insertion, or deletion of some accessible Oracle Hyperion Infrastructure Technology data. It could also cause a partial denial of service.