CVE-2014-4206: Unspecified vulnerability in the Hyperion Enterprise Performance Management Architect component in Oracle H...

Security readout for executives and security teams

This CVE describes an Oracle Hyperion issue where a local user could disrupt data integrity or service availability in the Enterprise Performance Management Architect Data Synchronizer. The public details are sparse, so business urgency depends on whether these older Hyperion versions remain in use and who has local access. Exposure is most likely limited to environments still running Oracle Hyperion EPM Architect 11.1.2.2 or 11.1.2.3 where local users can access the affected system or Data Synchronizer-related functionality. Treat this as a targeted legacy-platform risk. Prioritize if affected Hyperion versions remain in production, especially where many users or administrators have local access. If the product is retired or isolated, urgency is lower. Mitigation focus: Review Oracle July 2014 CPU guidance for vendor-supported fixes or upgrade direction.; Inventory Oracle Hyperion EPM Architect versions 11.1.2.2 and 11.1.2.3.; Restrict local user access to affected Hyperion hosts and administrative workflows..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.