Vulnerability in Oracle Hyperion Financial Reporting Affects Workspace Component

CVE-2025-50108

What is CVE-2025-50108?

An exploitable vulnerability has been identified in the Oracle Hyperion Financial Reporting product, specifically within the Workspace component. This flaw allows low-privileged attackers with network access via HTTP to potentially compromise the financial reporting system. Successful exploitation requires human interaction from a user other than the attacker, which could lead to various unauthorized actions such as updates, inserts, or deletions of accessible data. Additionally, it may enable unauthorized read access to a subset of sensitive data within the Oracle Hyperion Financial Reporting environment. The impact of this vulnerability can extend beyond the affected product, causing significant implications for overall data integrity and confidentiality.

References