CVE-2026-62481

Received Received - Intake

Oracle Hyperion Infrastructure Technology SQL Injection

Publication date: 2026-08-18

Last updated on: 2026-08-18

Assigner: Oracle

Description

Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via SQL to compromise Oracle Hyperion Infrastructure Technology. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Infrastructure Technology. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-18

Last Modified

2026-08-18

Generated

2026-08-19

AI Q&A

2026-08-19

EPSS Evaluated

N/A

NVD

CVE-2026-62481

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	hyperion_infrastructure_technology	11.2.25.0.000

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle Hyperion Infrastructure Technology (version 11.2.25.0.000) that allows a low-privileged attacker with network access to execute SQL commands and potentially take over the system. The attack requires network access but no user interaction.

Detection Guidance

Detection requires checking for Oracle Hyperion Infrastructure Technology version 11.2.25.0.000. Inspect installed versions via Oracle's tools or system logs. No specific commands are provided in the context.

Impact Analysis

If exploited, this vulnerability could allow an attacker to gain full control over the Oracle Hyperion Infrastructure Technology system, leading to unauthorized access, data theft, or system disruption.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, which may violate compliance requirements under GDPR, HIPAA, or other regulations that mandate data protection and system security.

Mitigation Strategies

Apply Oracle's official patches or updates for Oracle Hyperion Infrastructure Technology. Restrict network access to the component via firewalls. Monitor for unusual SQL queries targeting the system.

Hi! I’m here to help you understand CVE-2026-62481. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70