Access and Security Vulnerability in Oracle Hyperion Data Relationship Management
CVE-2026-87147

7.7HIGH

Key Information:

Vendor

Oracle

Vendor
CVE Published:
15 September 2026

What is CVE-2026-87147?

A significant access control vulnerability exists in the Oracle Hyperion Data Relationship Management product, specifically within its access and security component. An attacker with high privileges and network access via HTTP could exploit this vulnerability, facilitating unauthorized actions such as creation, deletion, or modification of critical data. Although the risk is primarily within Oracle Hyperion Data Relationship Management, potential attacks could affect other interconnected products. This vulnerability poses serious risks, enabling attackers to access sensitive information and compromise the integrity of data managed within the Oracle Hyperion ecosystem.

Affected Version(s)

Oracle Hyperion Data Relationship Management 11.2.26.0.000

References

CVSS V3.1

Score:
7.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.