CVE-2026-61281
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk19th percentile - higher than 19% of all known CVEs
Summary
Vulnerability in Oracle Hyperion Calculation Manager (component: Security) affects version 11.2.25.0.000. An unauthenticated attacker with network access via HTTP, requiring user interaction, can perform unauthorized modifications to critical data and gain full access to data. CVSS score is 8.1.
Risk Assessment
The risk is high as an attacker can compromise integrity and confidentiality of data, potentially leading to serious business consequences.
Recommendation
Apply Oracle patches. Restrict network access and educate users about the risks of interacting with untrusted content.
Original NVD description (English source)
Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Calculation Manager. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Calculation Manager accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Calculation Manager accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N).