Analysis and contextual insights are available on OpenCVE Cloud.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
| Link | Providers |
|---|---|
| https://www.oracle.com/security-alerts/cspuaug2026.html |
|
Tue, 25 Aug 2026 22:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Low-privilege Local Access Control Vulnerability in Oracle Hyperion Infrastructure |
Tue, 25 Aug 2026 19:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Improper Access Control Leading to Unauthorized Data Access in Oracle Hyperion Infrastructure Technology |
Tue, 25 Aug 2026 18:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Tue, 25 Aug 2026 16:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | NVD-CWE-noinfo |
Fri, 21 Aug 2026 12:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Improper Access Control Leading to Unauthorized Data Access in Oracle Hyperion Infrastructure Technology | |
| Weaknesses | CWE-284 |
Fri, 21 Aug 2026 10:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Data access via low‑privilege installation and configuration flaw in Oracle Hyperion Infrastructure Technology | |
| Weaknesses | CWE-284 |
Wed, 19 Aug 2026 01:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Data access via low‑privilege installation and configuration flaw in Oracle Hyperion Infrastructure Technology | |
| Weaknesses | CWE-284 |
Tue, 18 Aug 2026 21:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Infrastructure Technology executes to compromise Oracle Hyperion Infrastructure Technology. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Infrastructure Technology accessible data. CVSS 3.1 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). | |
| First Time appeared |
Oracle
Oracle hyperion Infrastructure Technology |
|
| CPEs | cpe:2.3:a:oracle:hyperion_infrastructure_technology:11.2.25.0.000:*:*:*:*:*:*:* | |
| Vendors & Products |
Oracle
Oracle hyperion Infrastructure Technology |
|
| References |
| |
| Metrics |
cvssV3_1
|
Status: PUBLISHED
Assigner: oracle
Published:
Updated: 2026-08-25T18:03:32.919Z
Reserved: 2026-07-14T14:54:48.741Z
Link: CVE-2026-62564
Updated: 2026-08-25T17:56:36.587Z
Status : Modified
Published: 2026-08-18T21:17:08.253
Modified: 2026-08-25T18:17:57.813
Link: CVE-2026-62564
No data.
OpenCVE Enrichment
Updated: 2026-08-25T22:00:13Z