CVE-2026-62581
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration). Affected version is 11.2.25.0.000. Easily exploitable vulnerability allows a low-privileged attacker with logon to the infrastructure to compromise Oracle Hyperion Infrastructure Technology, potentially leading to takeover.
Risk Assessment
Risk of complete takeover of Oracle Hyperion Infrastructure Technology, potentially leading to confidentiality, integrity, and availability breaches.
Recommendation
Apply Oracle patches for version 11.2.25.0.000. Restrict local access to the infrastructure and implement least privilege principle.
Original NVD description (English source)
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Infrastructure Technology executes to compromise Oracle Hyperion Infrastructure Technology. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Infrastructure Technology. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).