Access and Security Vulnerability in Oracle Hyperion Data Relationship Management by Oracle
CVE-2026-87132

7.6HIGH

Key Information:

Vendor

Oracle

Vendor
CVE Published:
15 September 2026

What is CVE-2026-87132?

Oracle Hyperion Data Relationship Management has a vulnerability in its access and security component that could allow a low-privileged attacker with network access via HTTP to compromise the system. This vulnerability requires human interaction from an individual other than the attacker, which could lead to unauthorized access to sensitive data. Consequently, attackers may gain extensive control over the Oracle Hyperion Data Relationship Management system, including the ability to modify, insert, or delete critical data. Though the vulnerability is specific to the Oracle Hyperion Data Relationship Management product, the ramifications may extend to affect additional related products.

Affected Version(s)

Oracle Hyperion Data Relationship Management 11.2.26.0.000

References

CVSS V3.1

Score:
7.6
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.