CVE-2026-70888: Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Data Relationship Management. in Oracle Corporation Oracle Hyperion Data Relationship Management
CVE-2026-70888 is a vulnerability in Oracle Hyperion Data Relationship Management version 11.2.25.0.000. It allows a high privileged attacker with network access via HTTP to compromise the product, potentially resulting in a full takeover. The vulnerability has a CVSS 3.1 base score of 6.6, indicating medium severity with impacts on confidentiality, integrity, and availability. The vulnerability is difficult to exploit and requires high privileges. Oracle has included this fix in its August 2026 Critical Security Patch Update.
AI Analysis
Technical Summary
This vulnerability affects Oracle Hyperion Data Relationship Management component 'Access and security' in version 11.2.25.0.000. It permits a high privileged attacker with network access via HTTP to compromise the system, potentially leading to complete takeover. The CVSS 3.1 vector is AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H with a base score of 6.6. Oracle has released a Critical Security Patch Update in August 2026 addressing this and many other vulnerabilities. The vendor strongly recommends applying the patch promptly to mitigate the risk.
Potential Impact
Successful exploitation can lead to full compromise of Oracle Hyperion Data Relationship Management, impacting confidentiality, integrity, and availability of the system. The attack requires high privileges and network access via HTTP, and is considered difficult to exploit.
Mitigation Recommendations
Oracle has released a security patch for this vulnerability as part of the August 2026 Critical Security Patch Update. Customers should apply the patch without delay. Oracle recommends staying on actively supported versions and promptly applying security updates to prevent exploitation.
CVE-2026-70888: Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Data Relationship Management. in Oracle Corporation Oracle Hyperion Data Relationship Management
Description
CVE-2026-70888 is a vulnerability in Oracle Hyperion Data Relationship Management version 11.2.25.0.000. It allows a high privileged attacker with network access via HTTP to compromise the product, potentially resulting in a full takeover. The vulnerability has a CVSS 3.1 base score of 6.6, indicating medium severity with impacts on confidentiality, integrity, and availability. The vulnerability is difficult to exploit and requires high privileges. Oracle has included this fix in its August 2026 Critical Security Patch Update.
CVSS v3.1
Score 6.6medium
Affected software
Oracle Corporation
Oracle Hyperion Data Relationship Management
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability affects Oracle Hyperion Data Relationship Management component 'Access and security' in version 11.2.25.0.000. It permits a high privileged attacker with network access via HTTP to compromise the system, potentially leading to complete takeover. The CVSS 3.1 vector is AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H with a base score of 6.6. Oracle has released a Critical Security Patch Update in August 2026 addressing this and many other vulnerabilities. The vendor strongly recommends applying the patch promptly to mitigate the risk.
Potential Impact
Successful exploitation can lead to full compromise of Oracle Hyperion Data Relationship Management, impacting confidentiality, integrity, and availability of the system. The attack requires high privileges and network access via HTTP, and is considered difficult to exploit.
Mitigation Recommendations
Oracle has released a security patch for this vulnerability as part of the August 2026 Critical Security Patch Update. Customers should apply the patch without delay. Oracle recommends staying on actively supported versions and promptly applying security updates to prevent exploitation.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- oracle
- Date Reserved
- 2026-08-04T22:06:34.603Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Vendor Advisory Urls
- [{"url":"https://www.oracle.com/security-alerts/cspuaug2026.html","vendor":"Oracle"}]
Threat ID: 6a84ca1ac6e8be0332c0b15c
Added to database: 08/18/2026, 21:09:46 UTC
Last enriched: 09/11/2026, 14:34:11 UTC
Last updated: 10/02/2026, 14:46:10 UTC
Views: 61
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.