Access and Security Vulnerability in Oracle Hyperion Data Relationship Management
CVE-2026-87145

7.3HIGH

Key Information:

Vendor

Oracle
Status
Oracle Hyperion Data Relationship Management
Vendor
CVE Published:
15 September 2026

What is CVE-2026-87145?

A critical access and security vulnerability exists in Oracle Hyperion Data Relationship Management, allowing unauthenticated network access via HTTP. Attackers can exploit this flaw to gain unauthorized access, permitting data manipulation, including unauthorized updates, inserts, or deletions of accessible data. The vulnerability also risks unauthorized read access to sensitive data and potential partial denial of service, impacting the availability of the system. The affected version is 11.2.26.0.000, highlighting the urgency for users to secure their systems against such risks.

Affected Version(s)

Oracle Hyperion Data Relationship Management 11.2.26.0.000

References

https://www.oracle.com/security-alerts/cspusep2026.html
vendor-advisory

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.