Threat Intelligence Database

CVE-2026-87145 is a high-severity vulnerability in Oracle Hyperion Data Relationship Management version 11.2.26.0.000. It allows an unauthenticated attacker with network access via HTTP to perform unauthorized read, insert, update, or delete operations on accessible data and potentially cause a partial denial of service. The vulnerability affects confidentiality, integrity, and availability with a CVSS 3.1 base score of 7.3. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, recommending timely patching.

CVE-2026-87141 is a high-severity vulnerability in Oracle Hyperion Data Relationship Management version 11.2.26.0.000. It allows a low privileged attacker with network access via HTTP to compromise the product, potentially gaining unauthorized access to critical or all accessible data. The vulnerability has a CVSS 3.1 base score of 7.7, indicating significant confidentiality impact without affecting integrity or availability. The vulnerability may also impact additional Oracle products due to scope change. Oracle has released a Critical Security Patch Update in September 2026 addressing this and many other vulnerabilities.

CVE-2026-87137 is a high-severity vulnerability in Oracle Hyperion Data Relationship Management version 11.2.26.0.000. It allows a low privileged attacker with network access via HTTP to compromise the product, requiring user interaction from a third party. Successful exploitation can lead to unauthorized access to critical data and unauthorized modification of some data within the product. The vulnerability has a CVSS 3.1 base score of 7.6, indicating significant confidentiality and integrity impacts. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides patches for this and many other vulnerabilities across Oracle products.

CVE-2026-87134 is a high-severity vulnerability in Oracle Hyperion Data Relationship Management version 11.2.26.0.000. It allows a low privileged attacker with network access via TCP to compromise the product, potentially gaining unauthorized access to critical or all accessible data. The vulnerability has a CVSS 3.1 base score of 7.7, indicating significant confidentiality impact without affecting integrity or availability. The vulnerability may also impact additional Oracle products due to scope change. Oracle has released security patches as part of its September 2026 Critical Security Patch Update.

CVE-2026-87133 is a high-severity vulnerability in Oracle Hyperion Data Relationship Management version 11.2.26.0.000. It allows a high privileged attacker with network access via HTTP to compromise the product, potentially leading to unauthorized access and modification of critical data. The vulnerability impacts confidentiality and integrity but does not affect availability. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides targeted security fixes.

CVE-2026-87132 is a high-severity vulnerability in Oracle Hyperion Data Relationship Management version 11.2.26.0.000. It allows a low privileged attacker with network access via HTTP to compromise the product, requiring user interaction from a person other than the attacker. Successful exploitation can lead to unauthorized access to critical data and unauthorized modification of some data. The vulnerability has a CVSS 3.1 base score of 7.6, indicating significant confidentiality and integrity impacts. Oracle has released a Critical Security Patch Update that addresses this and many other vulnerabilities across its product portfolio.

CVE-2026-87131 is a high-severity vulnerability in Oracle Hyperion Data Relationship Management version 11.2.26.0.000. It allows a low privileged attacker with network access via HTTP to potentially gain unauthorized access to critical data or perform unauthorized data modifications. Exploitation requires user interaction from someone other than the attacker and may impact additional Oracle products beyond Hyperion Data Relationship Management. The vulnerability has a CVSS 3.1 base score of 7.6, reflecting significant confidentiality and integrity impacts.

CVE-2026-70903 is a high-severity vulnerability in Oracle Hyperion Data Relationship Management version 11.2.25.0.000. It allows a low privileged attacker with network access via HTTPS to compromise the product, requiring user interaction from a person other than the attacker. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, potentially impacting additional Oracle products. The vulnerability has a CVSS 3.1 base score of 8.7, reflecting high confidentiality and integrity impacts. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update, recommending timely application of patches to mitigate risk.

CVE-2026-70900 is a high-severity vulnerability in Oracle Hyperion Data Relationship Management version 11.2.25.0.000. It allows an unauthenticated attacker with network access via HTTP to compromise the product, potentially leading to unauthorized creation, deletion, or modification of critical data. The vulnerability also has a scope change impact, affecting additional Oracle products. The CVSS 3.1 base score is 8.7, indicating significant confidentiality and integrity impacts. No known exploits are reported in the wild. Oracle has released a Critical Security Patch Update in August 2026 addressing this and other vulnerabilities.

CVE-2026-70898 is a high-severity vulnerability in Oracle Hyperion Data Relationship Management version 11.2.25.0.000. It allows an unauthenticated attacker with network access via HTTP to potentially gain unauthorized creation, deletion, or modification access to critical data within the product. The vulnerability impacts confidentiality and integrity but does not affect availability. The vulnerability is difficult to exploit and has a CVSS 3.1 base score of 7.4. Oracle has published a Critical Security Patch Update advisory that includes this vulnerability among many others but does not explicitly confirm patch availability for this specific version.