CVE-2026-87135

Oracle Hyperion Data Relationship Management (version 11.2.26.0.000 ) is affected by a vulnerability in its Access and security component. A low-privileged attacker with network access via HTTP can exploit this flaw to gain unauthorized read access to all accessible data and perform unauthorized ...

CVE-2026-87144

CVE-2026-87144 affects Oracle Hyperion Data Relationship Management (version 11.2.26.0.000 ), specifically the Access and security component. A low-privileged attacker with network access via HTTP can exploit this vulnerability, though successful attacks require human interaction from a person ot...

CVE-2026-87145

Oracle Hyperion Data Relationship Management (component: Access and security ) is affected in supported version 11.2.26.0.000 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability with low complexity to achieve unauthorized update, insert, or delete of accessib...

CVE-2026-70871

Oracle Hyperion Data Relationship Management version 11.2.25.0.000 has an unauthenticated, easily exploitable vulnerability in its Access and security component via TCP, allowing full product takeover with CVSS 9.8. Exploitation in the wild is not documented; Oracle's August 2026 security alert s...

CVE-2026-70879

Oracle Hyperion Data Relationship Management 11.2.25.0.000 is affected by a high-severity (CVSS 7.8) local vulnerability in its Access and security component. A low-privileged attacker with host logon can achieve full takeover with scope change, impacting additional products. No specific root cau...

CVE-2026-87132

Oracle Hyperion Data Relationship Management (component: Access and security ) in version 11.2.26.0.000 is vulnerable to a low-privilege attacker with network access via HTTP . Successful exploitation requires human interaction from a non-attacker and involves a scope change , meaning attacks may...

CVE-2026-87137

Oracle Hyperion Data Relationship Management (component: Access and security ) version 11.2.26.0.000 is affected by a network-based vulnerability exploitable over HTTP by a low-privileged attacker. Successful exploitation requires user interaction and involves a scope change , meaning the attack ...

CVE-2026-87143

Oracle Hyperion Data Relationship Management (component: Access and security ), version 11.2.26.0.000 , is affected by a vulnerability that allows an unauthenticated attacker with network access via TCP to compromise the product. The attack complexity is rated high (CVSS 3.1: 7.4 , AV:N/AC:H/PR:N...

CVE-2026-70882

Oracle Hyperion Data Relationship Management 11.2.25.0.000 (Access and security component) is affected by a HIGH-severity vulnerability (CVSS 8.7) exploitable by a low-privileged network attacker via HTTP, requiring user interaction, enabling unauthorized read/write access to critical data with s...

CVE-2026-70894

Oracle Hyperion Data Relationship Management 11.2.25.0.000, in the Access and security component, has an easily exploitable flaw allowing an unauthenticated local attacker with infrastructure access to compromise the application, resulting in unauthorized creation, deletion, modification, or full...

CVE-2026-87128

A vulnerability in the Oracle Hyperion Data Relationship Management product (component: Access and security ) affects version 11.2.26.0.000 . An unauthenticated attacker with network access via HTTP can exploit this to achieve unauthorized creation, deletion, modification, and access to critical ...

CVE-2026-87131

A vulnerability in the Access and security component of Oracle Hyperion Data Relationship Management (version 11.2.26.0.000 ) allows a low-privileged attacker with network access via HTTP to compromise the product. The attack requires human interaction and involves a scope change , meaning it can...

CVE-2026-70870

Oracle Hyperion Data Relationship Management 11.2.23.0.000, Web Client - Unicode component, is vulnerable to unauthenticated HTTP attacks allowing full data access and partial DoS. CVSS 8.2 HIGH (C:H/A:L). Patch details are not provided; no exploitation reported. See Oracle CSP Aug 2026 advisory....

CVE-2026-70902

Oracle Hyperion Data Relationship Management v11.2.25.0.000 has a HIGH-severity flaw (CVSS 7.1) in its Access and security component. A low-privileged local attacker can gain unauthorized creation, deletion, and modification access to all accessible data, with high confidentiality and integrity i...

CVE-2026-87136

CVE-2026-87136 affects the Access and security component of Oracle Hyperion Data Relationship Management version 11.2.26.0.000 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data or complete access to all data acce...

CVE-2026-87142

Oracle Hyperion Data Relationship Management (component: Access and security ), version 11.2.26.0.000 , is affected by an easily exploitable vulnerability allowing an unauthenticated network attacker via HTTPS to compromise the product. Successful exploitation requires human interaction from a th...

CVE-2026-87139

Oracle Hyperion Data Relationship Management (component: Access and security ) version 11.2.26.0.000 is affected by a network-based vulnerability that allows a low-privileged attacker with HTTP access to compromise the product. The vulnerability is rated difficult to exploit but, if successful, r...

CVE-2026-70878

CVE-2026-70878 affects Oracle Hyperion Data Relationship Management version 11.2.25.0.000 , specifically the Access and security component. A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve unauthorized creation, deletion, or modification of critical...