CVE-2026-62569

Received Received - Intake

Privilege Escalation in Oracle Hyperion Infrastructure Technology

Publication date: 2026-08-18

Last updated on: 2026-08-18

Assigner: Oracle

Description

Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hyperion Infrastructure Technology executes to compromise Oracle Hyperion Infrastructure Technology. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hyperion Infrastructure Technology accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hyperion Infrastructure Technology. CVSS 3.1 Base Score 3.4 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-18

Last Modified

2026-08-18

Generated

2026-08-19

AI Q&A

2026-08-19

EPSS Evaluated

N/A

NVD

CVE-2026-62569

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	hyperion_infrastructure_technology	11.2.25.0.000

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle Hyperion Infrastructure Technology version 11.2.25.0.000. It allows a high-privileged attacker with local access to compromise the system. Successful exploitation can lead to unauthorized data modification and partial denial of service.

Detection Guidance

This vulnerability requires high privileged local access to exploit, so detection primarily involves monitoring for unauthorized changes to Oracle Hyperion Infrastructure Technology files or configurations. Check for unexpected modifications in installation directories or configuration files. Review system logs for suspicious activity related to the Oracle Hyperion service.

Impact Analysis

If you use Oracle Hyperion Infrastructure Technology version 11.2.25.0.000, an attacker with local access could alter data or disrupt services. This requires high privileges, so typical users are less likely to be directly affected.

Mitigation Strategies

Apply the latest Oracle Hyperion Infrastructure Technology patches immediately. Restrict local access to systems running Oracle Hyperion to only trusted administrators. Monitor for unauthorized data changes or service disruptions. Review and tighten file permissions on Oracle Hyperion directories.

Hi! I’m here to help you understand CVE-2026-62569. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70