CVE-2026-62533
LowCVSS 3.7Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
Vulnerability in Oracle Hyperion Calculation Manager (component: Security) version 11.2.25.0.000. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks can result in unauthorized read access to a subset of accessible data.
Risk Assessment
Risk of confidentiality breach in Oracle Hyperion Calculation Manager. An attacker may gain unauthorized access to some data.
Recommendation
Apply Oracle patches for version 11.2.25.0.000. Restrict network access to the system and monitor logs for suspicious HTTP requests.
Original NVD description (English source)
Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Calculation Manager. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hyperion Calculation Manager accessible data. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).