CVE-2026-62532
LowCVSS 3.8Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
Vulnerability in Oracle Hyperion Calculation Manager (component: Security) version 11.2.25.0.000. An easily exploitable flaw allows a high-privileged attacker with network access via SQL to compromise the system. Successful attacks can result in unauthorized update, insert, delete, and read access to some data.
Risk Assessment
Risk of integrity and confidentiality breach in Oracle Hyperion Calculation Manager. A high-privileged attacker may modify or read data without authorization.
Recommendation
Apply Oracle patches for version 11.2.25.0.000. Restrict access for high-privileged users and monitor SQL queries.
Original NVD description (English source)
Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via SQL to compromise Oracle Hyperion Calculation Manager. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hyperion Calculation Manager accessible data as well as unauthorized read access to a subset of Oracle Hyperion Calculation Manager accessible data. CVSS 3.1 Base Score 3.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N).