Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion Calculation Manager executes to compromise Oracle Hyperion Calculation Manager. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hyperion Calculation Manager accessible data. CVSS 3.1 Base Score 2.6 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N).
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Oracle |
|
No data.
References
| Link | Providers |
|---|---|
| https://www.oracle.com/security-alerts/cspuaug2026.html |
|
History
Thu, 27 Aug 2026 00:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Low-Privilege Data Modification via Physical Segment |
Wed, 26 Aug 2026 18:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-284 | |
| Metrics |
ssvc
|
Tue, 25 Aug 2026 19:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Low-Privilege Access to Physical Segment Allows Unauthorized Data Modification in Oracle Hyperion Calculation Manager | |
| Weaknesses | CWE-284 |
Tue, 25 Aug 2026 14:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | NVD-CWE-noinfo |
Fri, 21 Aug 2026 10:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Low-Privilege Access to Physical Segment Allows Unauthorized Data Modification in Oracle Hyperion Calculation Manager | |
| Weaknesses | CWE-284 |
Wed, 19 Aug 2026 12:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Local Physical Network Access Allows Unauthorized Data Modification in Oracle Hyperion Calculation Manager 11.2.25.0.000 | |
| Weaknesses | CWE-284 |
Wed, 19 Aug 2026 01:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Local Physical Network Access Allows Unauthorized Data Modification in Oracle Hyperion Calculation Manager 11.2.25.0.000 | |
| Weaknesses | CWE-284 |
Tue, 18 Aug 2026 21:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion Calculation Manager executes to compromise Oracle Hyperion Calculation Manager. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hyperion Calculation Manager accessible data. CVSS 3.1 Base Score 2.6 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N). | |
| First Time appeared |
Oracle
Oracle hyperion Calculation Manager |
|
| CPEs | cpe:2.3:a:oracle:hyperion_calculation_manager:11.2.25.0.000:*:*:*:*:*:*:* | |
| Vendors & Products |
Oracle
Oracle hyperion Calculation Manager |
|
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: oracle
Published: 2026-08-18T21:00:35.287Z
Updated: 2026-08-26T17:34:47.671Z
Reserved: 2026-07-14T14:54:48.742Z
Link: CVE-2026-62580
Vulnrichment
Updated: 2026-08-26T17:31:08.994Z
NVD
Status : Modified
Published: 2026-08-18T21:17:10.063
Modified: 2026-08-26T18:16:51.377
Link: CVE-2026-62580
Redhat
No data.