Oracle Hyperion Planning and Budgeting Cloud Service EPM Agent Vulnerability Allowing Unauthorized Data Modification

A vulnerability exists in the Oracle Planning and Budgeting Cloud Service component of Oracle Hyperion, specifically in version 25.04.07. This easily exploitable vulnerability allows a high-privileged attacker with access to the infrastructure where the service runs to compromise the application. Successful exploitation, which requires human interaction from a third party, can lead to unauthorized creation, deletion, or modification of critical data, or any data accessible within Oracle Planning and Budgeting Cloud Service.

Impact

Exploitation of this vulnerability could result in unauthorized changes to critical data or all data accessible within Oracle Planning and Budgeting Cloud Service.

Remediation

Users are advised to update the EPM Agent. For more information on downloading the EPM Agent, please refer to the Oracle documentation.