Access and Security Vulnerability in Oracle Hyperion Data Relationship Management

CVE-2026-70887

What is CVE-2026-70887?

A significant access control vulnerability has been identified in Oracle Hyperion Data Relationship Management, specifically within its access and security components. The affected version, 11.2.25.0.000, can be exploited by unauthenticated attackers with network access via HTTP. This vulnerability poses a serious risk, potentially allowing attackers to gain unauthorized access to critical data or compromise the integrity of all accessible data within the Oracle Hyperion environment. Successful exploitation may lead to unauthorized updates, inserts, or deletions of data, highlighting the need for immediate attention and remediation.

References