Access Vulnerability in Oracle Hyperion Data Relationship Management
CVE-2026-87130

7.4HIGH

Key Information:

Vendor

Oracle
Status
Oracle Hyperion Data Relationship Management
Vendor
CVE Published:
15 September 2026

What is CVE-2026-87130?

A vulnerability in Oracle Hyperion Data Relationship Management enables unauthenticated remote attackers with network access via SMTP to compromise the system. The issue facilitates unauthorized creation, deletion, or modification of critical data, as well as granting complete access to all data in the application. This vulnerability emphasizes the need for proper security measures to protect sensitive information from being exploited.

Affected Version(s)

Oracle Hyperion Data Relationship Management 11.2.26.0.000

References

https://www.oracle.com/security-alerts/cspusep2026.html
vendor-advisory

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.