CVE-2026-62459

Received Received - Intake

Authentication Bypass in Oracle Hyperion Calculation Manager

Publication date: 2026-08-18

Last updated on: 2026-08-18

Assigner: Oracle

Description

Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Calculation Manager. While the vulnerability is in Oracle Hyperion Calculation Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Calculation Manager accessible data as well as unauthorized update, insert or delete access to some of Oracle Hyperion Calculation Manager accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hyperion Calculation Manager. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:L).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-18

Last Modified

2026-08-18

Generated

2026-08-19

AI Q&A

2026-08-19

EPSS Evaluated

N/A

NVD

CVE-2026-62459

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	hyperion_calculation_manager	11.2.25.0.000

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle Hyperion Calculation Manager version 11.2.25.0.000. It allows a high privileged attacker with network access via HTTP to compromise the system. The vulnerability can lead to unauthorized access to critical data, data manipulation, and partial denial of service.

Detection Guidance

Detection may involve checking for unauthorized access to Oracle Hyperion Calculation Manager via HTTP. Monitor logs for unusual activity, especially from high-privileged accounts. Verify if the affected version 11.2.25.0.000 is installed and exposed to network access.

Impact Analysis

An attacker could gain unauthorized access to sensitive data, modify or delete data, or disrupt services. This could lead to data breaches, loss of data integrity, and operational disruptions for systems relying on Oracle Hyperion Calculation Manager.

Compliance Impact

This vulnerability could lead to unauthorized access or disclosure of personal or sensitive data, violating GDPR and HIPAA requirements. Organizations may face legal penalties, reputational damage, and loss of compliance certifications if such breaches occur.

Mitigation Strategies

Apply Oracle's official patches or updates for Oracle Hyperion Calculation Manager version 11.2.25.0.000. Restrict network access to the component, especially HTTP interfaces. Review and limit high-privileged accounts with access to the system.

Hi! I’m here to help you understand CVE-2026-62459. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70