A vulnerability in Oracle Hyperion Data Relationship Management version 11.2.26.0.0 allows unauthenticated attackers with network access via HTTP to perform unauthorized read, insert, update, or delete operations on accessible data and cause partial denial of service. The vulnerability has a CVSS 3.1 base score of 7.3, indicating high severity. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides patches for affected products including this version of Oracle Hyperion Data Relationship Management.
A vulnerability in Oracle Hyperion Data Relationship Management version 11.2.26.0.0 allows an unauthenticated attacker with network access via TCP to potentially gain unauthorized creation, deletion, or modification access to critical data. The vulnerability has a CVSS 3.1 base score of 7.4, indicating high severity with impacts on confidentiality and integrity. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides security patches for this and many other vulnerabilities.
A vulnerability exists in Oracle Hyperion Data Relationship Management version 11.2.26.0.0 that allows a low privileged attacker with network access via HTTP to compromise the product. Exploitation requires user interaction from a person other than the attacker and can lead to unauthorized access and modification of critical data. The vulnerability has a CVSS 3.1 base score of 7.6, indicating high severity with significant confidentiality and integrity impacts.
A vulnerability in Oracle Hyperion Data Relationship Management version 11.2.26.0.000 allows an unauthenticated attacker with network access via HTTPS to potentially cause unauthorized modification or deletion of critical data and partial denial of service. Exploitation requires user interaction by a person other than the attacker. The vulnerability has a CVSS 3.1 base score of 7.1, indicating high severity with impacts on integrity and availability.
A vulnerability exists in Oracle Hyperion Data Relationship Management version 11.2.26.0.0 related to access and security. It allows a low privileged attacker with network access via HTTP to potentially take over the product. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update.
CVE-2026-87137 is a vulnerability in Oracle Hyperion Data Relationship Management version 11.2.26.0.0 affecting the access and security component. It allows a low privileged attacker with network access via HTTP to compromise the product, requiring user interaction from a third party. Successful exploitation can lead to unauthorized access to critical data and unauthorized modification of some data. The vulnerability has a CVSS 3.1 base score of 7.6, indicating high severity.
A vulnerability exists in Oracle Hyperion Data Relationship Management version 11.2.26.0.0 that allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity due to confidentiality impact. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update.
Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via TCP to compromise Oracle Hyperion Data Relationship Management. While the vulnerability is in Oracle Hyperion Data Relationship Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Data Relationship Management accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).
Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management. While the vulnerability is in Oracle Hyperion Data Relationship Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Data Relationship Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Hyperion Data Relationship Management accessible data. CVSS 3.1 Base Score 7.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N).
Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hyperion Data Relationship Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Data Relationship Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Hyperion Data Relationship Management accessible data. CVSS 3.1 Base Score 7.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N).
CVE-2026-70895 is a vulnerability in Oracle Hyperion Data Relationship Management version 11.2.25.0.000. It allows a low privileged attacker with logon access to the infrastructure where the product runs to compromise the system. The vulnerability can lead to unauthorized access to critical data or complete access to all data accessible by Oracle Hyperion Data Relationship Management. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity with significant confidentiality impact. The vulnerability also has scope change, potentially impacting additional Oracle products.
CVE-2026-70885 is a vulnerability in Oracle Hyperion Data Relationship Management version 11.2.25.0.000. It allows a low privileged attacker with network access via HTTP to potentially take over the product. The vulnerability impacts confidentiality, integrity, and availability, with a CVSS 3.1 base score of 8.5. Attacks exploiting this flaw may also affect additional Oracle products. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update, which provides security patches across many Oracle products.