Description
Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Hyperion Data Relationship Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Data Relationship Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Hyperion Data Relationship Management accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N).
Published: 2026-08-18
Score: 8.2 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

Oracle Hyperion Data Relationship Management is vulnerable to an easily exploitable flaw in its Access and security component. An attacker who can reach the system through HTTPS can gain unauthorized access to critical data and, in some cases, modify or delete that data. The vulnerability can result in a loss of confidentiality of the data exposed by the system, with only a minimal impact on integrity.

Affected Systems

Products affected are Oracle Hyperion Data Relationship Management version 11.2.25.0.000. No other versions or products are listed as affected.

Risk and Exploitability

The CVSS v3.1 score of 8.2 indicates a high severity with a high confidentiality impact and a low integrity impact. The EPSS score is <1%, indicating a very low but nonzero exploitation probability, yet the vulnerability is reported as easily exploitable and requires only network access via HTTPS. The issue is not listed in the CISA KEV catalog. Based on the description, it is inferred that the likely attack vector is over the network via HTTPS, and that unauthenticated users can trigger the vulnerability to compromise the system.

Generated by OpenCVE AI on August 20, 2026 at 09:40 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply Oracle's latest patch for Hyperion Data Relationship Management 11.2.25.0.000.
  • Restrict HTTPS access to trusted network zones and enforce network segmentation to limit exposure to the application.
  • Implement strict access control and authentication policies in the Hyperion data environment to mitigate unauthorized data access.

Generated by OpenCVE AI on August 20, 2026 at 09:40 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 22 Aug 2026 02:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 20 Aug 2026 10:00:00 +0000

Type Values Removed Values Added
Title Oracle Hyperion Data Relationship Management Unauthenticated HTTPS Data Access Vulnerability
Weaknesses CWE-284
CWE-287

Tue, 18 Aug 2026 21:15:00 +0000

Type Values Removed Values Added
Description Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Hyperion Data Relationship Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Data Relationship Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Hyperion Data Relationship Management accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N).
First Time appeared Oracle
Oracle hyperion Data Relationship Management
CPEs cpe:2.3:a:oracle:hyperion_data_relationship_management:11.2.25.0.000:*:*:*:*:*:*:*
Vendors & Products Oracle
Oracle hyperion Data Relationship Management
References
Metrics cvssV3_1

{'score': 8.2, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N'}

Subscriptions

Oracle Hyperion Data Relationship Management
cve-icon MITRE

Status: PUBLISHED

Assigner: oracle

Published:

Updated: 2026-08-22T01:59:32.288Z

Reserved: 2026-08-04T22:06:34.604Z

Link: CVE-2026-70897

cve-icon Vulnrichment

Updated: 2026-08-22T01:59:27.267Z

cve-icon NVD

Status : Analyzed

Published: 2026-08-18T21:17:47.357

Modified: 2026-08-24T16:22:28.863

Link: CVE-2026-70897

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-20T09:45:17Z

Weaknesses