CVE-2026-62511
LowCVSS 3.0Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. A difficult-to-exploit flaw allows a high-privileged attacker with local access to the infrastructure to compromise the system. Successful attacks can result in unauthorized update, insert, delete, and read access to some data.
Risk Assessment
Risk of integrity and confidentiality breach in Oracle Hyperion Infrastructure Technology. An attacker with local access and high privileges may modify or read data.
Recommendation
Apply Oracle patches for version 11.2.25.0.000. Restrict local access to the infrastructure and control user privileges.
Original NVD description (English source)
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hyperion Infrastructure Technology executes to compromise Oracle Hyperion Infrastructure Technology. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hyperion Infrastructure Technology accessible data as well as unauthorized read access to a subset of Oracle Hyperion Infrastructure Technology accessible data. CVSS 3.1 Base Score 3.0 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N).