Access and Security Vulnerability in Oracle Hyperion Data Relationship Management
CVE-2026-70875

7.5HIGH

Key Information:

Vendor

Oracle
Status
Oracle Hyperion Data Relationship Management
Vendor
CVE Published:
18 August 2026

What is CVE-2026-70875?

A vulnerability exists within Oracle Hyperion Data Relationship Management's access and security component, allowing low-privilege attackers with network access via HTTP to exploit the system. This issue particularly affects version 11.2.25.0.000. Successful exploitation could lead to a complete takeover of the application, exposing sensitive data and compromising the integrity and availability of the affected system.

Affected Version(s)

Oracle Hyperion Data Relationship Management 11.2.25.0.000

References

https://www.oracle.com/security-alerts/cspuaug2026.html
vendor-advisory

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.