CVE-2026-70887

HighCVSS 8.2

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

19th percentile - higher than 19% of all known CVEs

Summary

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. Easily exploitable by an unauthenticated attacker via network (HTTP), allowing unauthorized access to critical data or complete access to all product data, as well as unauthorized update, insert, or delete of some data. CVSS 3.1 score: 8.2 (Confidentiality and Integrity impacts).

Risk Assessment

Risk of confidentiality and integrity breach, potentially leading to leakage or modification of critical information.

Recommendation

Apply patches from Oracle and restrict network access to the HTTP service.

Original NVD description (English source)

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Data Relationship Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Hyperion Data Relationship Management accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N).