Skip to content
OracleCVE-2026-62603

Oracle Hyperion Calculation Manager: data tampering via Security

Medium5.4CVE-2026-62603 · Published Aug 18, 2026 · updated Aug 25, 2026

Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion Calculation Manager executes to compromise Oracle Hyperion Calculation Manager. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hyperion Calculation Manager accessible data as well as unauthorized read access to a subset of Oracle Hyperion Calculation Manager accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).

Oracle advisory

Affected versions

PackageAffectedFixed in
Oracle Hyperion Calculation Manager
Product
<= 11.2.25.0.000No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-284

More Oracle advisories

All Oracle
Advisory
Helidon: data tampering via Imperative Web Server
High8.6Aug 18
Helidon: data tampering via Imperative Web Server
Critical9.9Aug 18
Helidon: data tampering via Imperative Web Server
High8.3Aug 18
Helidon: flaw in Imperative Web Server
Medium5.3Aug 18
Helidon: data tampering via Imperative Web Server
High7.3Aug 18
Helidon: denial of service via Imperative Web Server
High7.5Aug 18

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.