Access and Security Vulnerability in Oracle Hyperion Data Relationship Management

CVE-2026-87144

What is CVE-2026-87144?

Oracle Hyperion Data Relationship Management has a vulnerability allowing low privileged attackers with network access via HTTP to potentially compromise the system. Exploitation requires human interaction from users other than the attacker. While the primary target is Oracle Hyperion Data Relationship Management, the impact can extend to other related products. Successful exploitation can lead to unauthorized access to critical data, including total access to all readable data in Hyperion, along with unauthorized operations like updates, inserts, or deletions. This flaw poses significant security risks for organizations relying on Oracle Hyperion systems.

References