CVE-2026-87138: High severity Oracle Oracle Hyperion Data Relationship Management vulnerability
Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Oracle Hyperion Data Relationship Management. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Hyperion Data Relationship Management. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed?
Oracle Hyperion Data Relationship Management version 11.2.26.0.000 is identified as affected. Exposure requires network access to its SOAP interface.
What does an attacker need to exploit this issue?
An attacker does not need authentication or user interaction. The attack can be performed over the network via SOAP and has low attack complexity.
Does this issue allow data disclosure or modification?
The provided CVSS vector identifies no confidentiality or integrity impact. The stated impact is availability: an attacker can cause a hang or repeated crash resulting in a complete denial of service.