CVE-2026-62604

LOW
INFO Priority: 0.01 BB Relevance: 41/100
Published: 2026-08-18 Modified: 2026-10-22 First seen: 2026-10-29 Status: active

Attack Surface

Adjacent No Auth No Interaction

CVSS Vector Breakdown

AV: Adjacent
AC: High
PR: None
UI: None
S: Unchanged
C: Low
I: None
A: None

Description

Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion Calculation Manager executes to compromise Oracle Hyperion Calculation Manager. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hyperion Calculation Manager accessible data. CVSS 3.1 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
oracle hyperion_calculation_manager 11.2.25.0.000

References & Advisories (1)

Bug Bounty Relevance

41 / 100
✓ No authentication
✓ No user interaction

CVSS Score

3.1 / 10.0 v3.1
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS — Exploitation Probability

0.25%
Raw Score 0.002490
Percentile 16.3%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00249
2026-10-28
0.00249

Intelligence Sources

nvd ref →