Oracle Hyperion Data Relationship Management vulnerabilities
56 known CVE vulnerabilities in Oracle Hyperion Data Relationship Management, translated and rated.
- CVE-2026-87129Critical
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.26.0.000. An unauthenticated attacker with network access via HTTP can easily exploit it, leading to unauthorized creation, deletion, or modification of data and unauthorized access to data. CVSS 3.1 Base Score 9.1.
- CVE-2026-87128Critical
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.26.0.000. An unauthenticated attacker with network access via HTTP can easily exploit it, leading to unauthorized creation, deletion, or modification of data and unauthorized access to data. CVSS 3.1 Base Score 9.1.
- CVE-2026-70884Critical
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) allows an unauthenticated attacker with network access via SOAP to gain unauthorized access to data and modify it. The attack requires no user interaction.
- CVE-2026-70883Critical
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to data and modify it. The attack requires no user interaction.
- CVE-2026-70880Critical
Vulnerability in Oracle Hyperion Data Relationship Management product, component Access and security. Affected version is 11.2.25.0.000. An unauthenticated attacker can remotely compromise the system via TCP, potentially impacting other products.
- CVE-2026-70876Critical
Vulnerability in Oracle Hyperion Data Relationship Management product, component Access and security. Affected version is 11.2.25.0.000. A high privileged attacker can remotely compromise the system via HTTPS, potentially impacting other products.
- CVE-2026-70873Critical
Vulnerability in Oracle Hyperion Data Relationship Management product, component Access and security. Affected version is 11.2.25.0.000. An unauthenticated attacker can remotely compromise the system via TCP.
- CVE-2026-70872Critical
Vulnerability in Oracle Hyperion Data Relationship Management product, component Access and security. Affected version is 11.2.25.0.000. An unauthenticated attacker can remotely access and modify data via HTTP.
- CVE-2026-70871Critical
Vulnerability in Oracle Hyperion Data Relationship Management product, component Access and security. Affected version is 11.2.25.0.000. An unauthenticated attacker can remotely compromise the system via TCP.
- CVE-2026-87148High
Vulnerability in the Oracle Hyperion Data Relationship Management product (component: Access and security), affecting version 11.2.26.0.000. An unauthenticated attacker with network access via HTTP can cause a hang or frequently repeatable crash (complete DOS) of the application.
- CVE-2026-87147High
Vulnerability in the Oracle Hyperion Data Relationship Management product (component: Access and security), affecting version 11.2.26.0.000. A high privileged attacker with network access via HTTP can gain unauthorized creation, deletion or modification access to critical data as well as unauthorized access to critical data, and attacks may significantly impact additional products.
- CVE-2026-87146High
Vulnerability in the Oracle Hyperion Data Relationship Management product (component: Access and security), affecting version 11.2.26.0.000. A low privileged attacker with network access via HTTP can gain unauthorized access to critical data and unauthorized update, insert or delete access to some data.
- CVE-2026-87145High
Vulnerability in the Oracle Hyperion Data Relationship Management product (component: Access and security), affecting version 11.2.26.0.000. An unauthenticated attacker with network access via HTTP can gain unauthorized update, insert or delete access to some data, unauthorized read access to a subset of data, and cause a partial denial of service (partial DOS).
- CVE-2026-87144High
Vulnerability in the Oracle Hyperion Data Relationship Management product (component: Access and security), affecting version 11.2.26.0.000. A low privileged attacker with network access via HTTP requires human interaction and can gain unauthorized access to critical data and unauthorized update, insert or delete access to some data, and attacks may significantly impact additional products.
- CVE-2026-87143High
Vulnerability in the Oracle Hyperion Data Relationship Management product (component: Access and security), affecting version 11.2.26.0.000. An unauthenticated attacker with network access via TCP can gain unauthorized creation, deletion or modification access to critical data as well as unauthorized access to critical data.
- CVE-2026-87142High
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) affecting version 11.2.26.0.000. An unauthenticated attacker with network access via HTTPS can exploit it, but human interaction is required. Successful exploitation can result in unauthorized creation, deletion, or modification of critical data and partial denial of service.
- CVE-2026-87141High
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) affecting version 11.2.26.0.000. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data or all accessible data. The vulnerability may also impact additional products (scope change).
- CVE-2026-87140High
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) affecting version 11.2.26.0.000. A low-privileged attacker with network access via HTTP can take over the system, though exploitation is difficult. Impact covers confidentiality, integrity, and availability.
- CVE-2026-87139High
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) affecting version 11.2.26.0.000. A low-privileged attacker with network access via HTTP can take over the system, though exploitation is difficult. Impact covers confidentiality, integrity, and availability.
- CVE-2026-87138High
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) affecting version 11.2.26.0.000. An unauthenticated attacker with network access via SOAP can cause a hang or frequently repeatable crash (complete DoS).
- CVE-2026-87137High
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) affecting version 11.2.26.0.000. A low-privileged attacker with network access via HTTP can gain unauthorized access to and modify critical data, but human interaction is required. The vulnerability may also impact additional products (scope change).
- CVE-2026-87136High
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) affecting version 11.2.26.0.000. An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or all accessible data.
- CVE-2026-87135High
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) affecting version 11.2.26.0.000. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and update, insert, or delete some data.
- CVE-2026-87134High
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) affecting version 11.2.26.0.000. A low-privileged attacker with network access via TCP can gain unauthorized access to critical data or all accessible data. The vulnerability may also impact additional products (scope change).
- CVE-2026-87133High
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) affecting version 11.2.26.0.000. A high-privileged attacker with network access via HTTP can gain unauthorized access to critical data and update, insert, or delete some data. The vulnerability may also impact additional products (scope change).
- CVE-2026-87132High
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) affecting version 11.2.26.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the system, but requires human interaction from another person. It can lead to unauthorized access to critical data and modification, and may impact additional products (scope change).
- CVE-2026-87131High
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) affecting version 11.2.26.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the system, but requires human interaction from another person. It can lead to unauthorized access to critical data and modification, and may impact additional products (scope change).
- CVE-2026-87130High
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) affecting version 11.2.26.0.000. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via SMTP to compromise the system. It can lead to unauthorized creation, deletion, or modification of critical data and unauthorized access to it.
- CVE-2026-70904High
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. An unauthenticated attacker with access to the physical communication segment can gain unauthorized access to critical data and the ability to create, delete, or modify data.
- CVE-2026-70903High
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. A low-privileged attacker with network access via HTTPS, requiring user interaction, can gain unauthorized access to critical data and the ability to create, delete, or modify data. Attacks may impact additional products (scope change).
- CVE-2026-70902High
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. A low-privileged attacker with logon to the infrastructure where the system runs can gain unauthorized access to critical data and the ability to create, delete, or modify data.
- CVE-2026-70901High
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. An unauthenticated attacker with network access via HTTP, requiring user interaction, can gain unauthorized access to critical data and the ability to create, delete, or modify data.
- CVE-2026-70900High
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. An unauthenticated attacker with network access via HTTP, under difficult conditions, can gain unauthorized access to critical data and the ability to create, delete, or modify data. Attacks may impact additional products (scope change).
- CVE-2026-70899High
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. A low-privileged attacker with network access via HTTP can take over the Oracle Hyperion Data Relationship Management system.
- CVE-2026-70898High
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. An unauthenticated attacker with network access via HTTP, under difficult conditions, can gain unauthorized access to critical data and the ability to create, delete, or modify data.
- CVE-2026-70897High
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. Easily exploitable by an unauthenticated attacker via network (HTTPS), allowing unauthorized access to critical data or complete access to all product data, as well as unauthorized update, insert, or delete of some data. CVSS 3.1 score: 8.2 (Confidentiality and Integrity impacts).
- CVE-2026-70896High
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. Easily exploitable by an unauthenticated attacker via network (HTTP), allowing unauthorized access to critical data or complete access to all product data. CVSS 3.1 score: 7.5 (Confidentiality impact).
- CVE-2026-70895Medium
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. A low-privileged attacker with local access can gain unauthorized access to critical data, with impact on other products.
- CVE-2026-70894High
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. Easily exploitable by an unauthenticated attacker with local logon to the infrastructure, allowing unauthorized creation, deletion, or modification of critical data and unauthorized access to them. CVSS 3.1 score: 7.7 (Confidentiality and Integrity impacts).
- CVE-2026-70893High
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. Difficult to exploit, requires low privileges and network access via SQL, may impact additional products (scope change). Allows unauthorized creation, deletion, or modification of critical data and unauthorized access to them. CVSS 3.1 score: 8.2 (Confidentiality and Integrity impacts).
- CVE-2026-70892High
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. Difficult to exploit, requires low privileges and network access via HTTP, may impact additional products (scope change). Allows unauthorized creation, deletion, or modification of critical data and unauthorized access to them. CVSS 3.1 score: 8.2 (Confidentiality and Integrity impacts).
- CVE-2026-70891High
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. Easily exploitable by an unauthenticated attacker via network (HTTP), allowing unauthorized access to critical data or complete access to all product data. CVSS 3.1 score: 7.5 (Confidentiality impact).
- CVE-2026-70890High
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. Easily exploitable by an unauthenticated attacker via network (HTTP), allowing unauthorized access to critical data or complete access to all product data. CVSS 3.1 score: 7.5 (Confidentiality impact).
- CVE-2026-70889High
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. Easily exploitable by an unauthenticated attacker via network (HTTP), allowing unauthorized access to critical data or complete access to all product data. CVSS 3.1 score: 7.5 (Confidentiality impact).
- CVE-2026-70888Medium
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. A high-privileged attacker over the network (HTTP), under difficult conditions, can take over the system.
- CVE-2026-70887High
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. Easily exploitable by an unauthenticated attacker via network (HTTP), allowing unauthorized access to critical data or complete access to all product data, as well as unauthorized update, insert, or delete of some data. CVSS 3.1 score: 8.2 (Confidentiality and Integrity impacts).
- CVE-2026-70886High
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. Easily exploitable by a low-privileged attacker via network (HTTP), allowing takeover of Oracle Hyperion Data Relationship Management. CVSS 3.1 score: 8.8 (Confidentiality, Integrity and Availability impacts).
- CVE-2026-70885High
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to take over the system. Attacks may impact additional products (scope change).
- CVE-2026-70882High
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. An easily exploitable flaw requires user interaction and allows a low-privileged attacker to gain unauthorized access to and modify data. Attacks may impact additional products (scope change).
- CVE-2026-70881High
Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized access to and modify data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

