Access Vulnerability in Oracle Hyperion Data Relationship Management
CVE-2026-87142

7.1HIGH

Key Information:

Vendor

Oracle
Status
Oracle Hyperion Data Relationship Management
Vendor
CVE Published:
15 September 2026

What is CVE-2026-87142?

An access control vulnerability in Oracle Hyperion Data Relationship Management could allow an unauthenticated attacker with network access via HTTPS to compromise the system. To exploit this vulnerability, user interaction from a person other than the attacker is required. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, affecting all data accessible within the application. Additionally, it poses a risk of causing a partial denial of service, impacting system availability. Version 11.2.26.0.000 is particularly vulnerable.

Affected Version(s)

Oracle Hyperion Data Relationship Management 11.2.26.0.000

References

https://www.oracle.com/security-alerts/cspusep2026.html
vendor-advisory

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.