Unauthenticated Network Vulnerability in Oracle Hyperion Data Relationship Management

CVE-2026-70870

What is CVE-2026-70870?

A significant vulnerability exists within the Oracle Hyperion Data Relationship Management product, specifically in the Web Client component involving Unicode handling. The vulnerability allows an unauthenticated attacker with network access via HTTP to exploit the system, potentially leading to unauthorized access to sensitive information. In addition, successful exploitation may enable the attacker to initiate a partial denial of service, affecting the availability of the Oracle Hyperion Data Relationship Management environment. This highlights the importance of implementing security measures to protect critical data accessed through this product.

References