Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Hyperion Data Relationship Management accessible data as well as unauthorized read access to a subset of Oracle Hyperion Data Relationship Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hyperion Data Relationship Management. CVSS 3.1 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L).
Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management. While the vulnerability is in Oracle Hyperion Data Relationship Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Data Relationship Management accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).
Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hyperion Data Relationship Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Data Relationship Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Hyperion Data Relationship Management accessible data. CVSS 3.1 Base Score 7.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N).
Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hyperion Data Relationship Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Data Relationship Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Hyperion Data Relationship Management accessible data. CVSS 3.1 Base Score 7.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N).
CVE-2026-70903 is a high-severity vulnerability in Oracle Hyperion Data Relationship Management version 11.2.25.0.000. It allows a low privileged attacker with network access via HTTPS to compromise the product, requiring user interaction from a person other than the attacker. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, potentially impacting additional Oracle products. The vulnerability has a CVSS 3.1 base score of 8.7, reflecting high confidentiality and integrity impacts. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update, recommending timely application of patches to mitigate risk.
CVE-2026-70900 is a high-severity vulnerability in Oracle Hyperion Data Relationship Management version 11.2.25.0.000. It allows an unauthenticated attacker with network access via HTTP to compromise the product, potentially leading to unauthorized creation, deletion, or modification of critical data. The vulnerability also has a scope change impact, affecting additional Oracle products. The CVSS 3.1 base score is 8.7, indicating significant confidentiality and integrity impacts. No known exploits are reported in the wild. Oracle has released a Critical Security Patch Update in August 2026 addressing this and other vulnerabilities.
CVE-2026-70898 is a high-severity vulnerability in Oracle Hyperion Data Relationship Management version 11.2.25.0.000. It allows an unauthenticated attacker with network access via HTTP to potentially gain unauthorized creation, deletion, or modification access to critical data within the product. The vulnerability impacts confidentiality and integrity but does not affect availability. The vulnerability is difficult to exploit and has a CVSS 3.1 base score of 7.4. Oracle has published a Critical Security Patch Update advisory that includes this vulnerability among many others but does not explicitly confirm patch availability for this specific version.
CVE-2026-70894 is a vulnerability in Oracle Hyperion Data Relationship Management version 11.2.25.0.000. It allows an unauthenticated attacker with logon access to the infrastructure where the product runs to compromise the system. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, resulting in full access to all data accessible by Oracle Hyperion Data Relationship Management. The vulnerability has a CVSS 3.1 base score of 7.7, indicating high severity with significant confidentiality and integrity impacts. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update advisory. No explicit patch link was provided in the input, but Oracle strongly recommends applying available security patches promptly.
CVE-2026-70879 is a vulnerability in Oracle Hyperion Data Relationship Management version 11.2.25.0.000. It allows a low privileged attacker with logon access to the infrastructure where the product runs to compromise the system. Successful exploitation can lead to full takeover of Oracle Hyperion Data Relationship Management and may impact additional Oracle products. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high severity with significant confidentiality, integrity, and availability impacts. The vulnerability is difficult to exploit and requires high attack complexity and low privileges. Oracle has released a Critical Security Patch Update addressing this and many other vulnerabilities. Users are strongly advised to apply the available patches promptly.
CVE-2026-70874 is a high-severity vulnerability in Oracle Hyperion Data Relationship Management version 11.2.25.0.000. It allows a low privileged attacker with network access via HTTP to compromise the system, potentially leading to full takeover. The vulnerability affects access and security components and has a CVSS 3.1 base score of 8.8, indicating high impact on confidentiality, integrity, and availability.
CVE-2026-70870 is a high-severity vulnerability in Oracle Hyperion Data Relationship Management version 11.2.23.0.000. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical or all accessible data and cause a partial denial of service. The vulnerability affects the Web Client - Unicode component and has a CVSS 3.1 base score of 8.2, indicating high confidentiality impact and low availability impact. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update, which contains numerous security fixes across multiple products.