Security Flaw in Oracle Hyperion Data Relationship Management by Oracle
CVE-2026-70878

8.1HIGH

Key Information:

Vendor

Oracle
Status
Oracle Hyperion Data Relationship Management
Vendor
CVE Published:
18 August 2026

What is CVE-2026-70878?

A vulnerability has been identified in Oracle Hyperion Data Relationship Management, specifically in the access and security component. This flaw allows low-privileged attackers with network access via HTTP to exploit the system, leading to unauthorized creation, deletion, or modification of critical data. Attackers could gain access to all data that the product manages, posing serious risks to data confidentiality and integrity. Users of the supported version 11.2.25.0.000 should take immediate action to mitigate these risks and ensure their data remains secure. For further details, refer to the Oracle advisory.

Affected Version(s)

Oracle Hyperion Data Relationship Management 11.2.25.0.000

References

https://www.oracle.com/security-alerts/cspuaug2026.html
vendor-advisory

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.