CVE-2020-14752

CVE-2020-14752 is a difficult-to-exploit vulnerability in Oracle Hyperion Lifecycle Management (version 11.1.2.4, specifically the Shared Services component). It allows a high-privileged attacker with network access via HTTP to compromise the system, requiring human interaction from a non-attacker. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical or all Hyperion Lifecycle Management data, resulting in a CVSS 3.1 Base Score of 4.2 (Medium) with integrity impacts. There is currently no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.