# Oracle Hyperion Data Relationship Management vulnerabilities Source: https://junglewise.ai/threats/technologies/hyperion-data-relationship-management Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/hyperion-data-relationship-management.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 56 vulnerabilities in Oracle Hyperion Data Relationship Management: 0 in the last 7 days and 56 in the last 90 days, 9 of them critical and 0 exploited in the wild. The most recent, CVE-2026-87148, was published on 15 September 2026. Nothing in the last four weeks, down from 21 vulnerabilities in the four before. 0 critical against 2. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 56 - All time: 56 (9 critical, 0 exploited in the wild) ## About Oracle Hyperion Data Relationship Management Oracle software appliance for managing data relationships and hierarchies. ## Latest Oracle Hyperion Data Relationship Management vulnerabilities - [CVE-2026-87148: Oracle Hyperion Data Relationship Management denial of service in Access and security](https://junglewise.ai/threats/cve-2026-87148-oracle-hyperion-data-relationship-management-denial-of-service-in) (high, CVSS 7.5, published 15 Sep 2026) - [CVE-2026-87147: Oracle Hyperion Data Relationship Management access control bypass](https://junglewise.ai/threats/cve-2026-87147-oracle-hyperion-data-relationship-management-access-control) (high, CVSS 7.7, published 15 Sep 2026) - [CVE-2026-87146: Oracle Hyperion Data Relationship Management unauthorized access in access control](https://junglewise.ai/threats/cve-2026-87146-oracle-hyperion-data-relationship-management-unauthorized-access) (high, CVSS 7.1, published 15 Sep 2026) - [CVE-2026-87145: Oracle Hyperion Data Relationship Management authentication bypass](https://junglewise.ai/threats/cve-2026-87145-oracle-hyperion-data-relationship-management-authentication) (high, CVSS 7.3, published 15 Sep 2026) - [CVE-2026-87144: Oracle Hyperion Data Relationship Management cross-site request forgery in access control](https://junglewise.ai/threats/cve-2026-87144-oracle-hyperion-data-relationship-management-cross-site-request) (high, CVSS 7.6, published 15 Sep 2026) - [CVE-2026-87143: Oracle Hyperion Data Relationship Management unauthorized access in Access and security](https://junglewise.ai/threats/cve-2026-87143-oracle-hyperion-data-relationship-management-unauthorized-access) (high, CVSS 7.4, published 15 Sep 2026) - [CVE-2026-87142: Oracle Hyperion Data Relationship Management CSRF in access control](https://junglewise.ai/threats/cve-2026-87142-oracle-hyperion-data-relationship-management-csrf-in-access) (high, CVSS 7.1, published 15 Sep 2026) - [CVE-2026-87141: Oracle Hyperion Data Relationship Management unauthorized data access](https://junglewise.ai/threats/cve-2026-87141-oracle-hyperion-data-relationship-management-unauthorized-data) (high, CVSS 7.7, published 15 Sep 2026) - [CVE-2026-87140: Oracle Hyperion Data Relationship Management privilege escalation in access control](https://junglewise.ai/threats/cve-2026-87140-oracle-hyperion-data-relationship-management-privilege-escalation) (high, CVSS 7.5, published 15 Sep 2026) - [CVE-2026-87139: Oracle Hyperion Data Relationship Management privilege escalation in access and security](https://junglewise.ai/threats/cve-2026-87139-oracle-hyperion-data-relationship-management-privilege-escalation) (high, CVSS 7.5, published 15 Sep 2026) - [CVE-2026-87138: Oracle Hyperion Data Relationship Management denial of service via SOAP](https://junglewise.ai/threats/cve-2026-87138-oracle-hyperion-data-relationship-management-denial-of-service) (high, CVSS 7.5, published 15 Sep 2026) - [CVE-2026-87137: Oracle Hyperion Data Relationship Management cross-site request forgery in access controls](https://junglewise.ai/threats/cve-2026-87137-oracle-hyperion-data-relationship-management-cross-site-request) (high, CVSS 7.6, published 15 Sep 2026) - [CVE-2026-87136: Oracle Hyperion Data Relationship Management authentication bypass in access control](https://junglewise.ai/threats/cve-2026-87136-oracle-hyperion-data-relationship-management-authentication) (high, CVSS 7.5, published 15 Sep 2026) - [CVE-2026-87135: Oracle Hyperion Data Relationship Management access control bypass](https://junglewise.ai/threats/cve-2026-87135-oracle-hyperion-data-relationship-management-access-control) (high, CVSS 7.1, published 15 Sep 2026) - [CVE-2026-87134: Oracle Hyperion Data Relationship Management authentication bypass](https://junglewise.ai/threats/cve-2026-87134-oracle-hyperion-data-relationship-management-authentication) (high, CVSS 7.7, published 15 Sep 2026) - [CVE-2026-87133: Oracle Hyperion Data Relationship Management access control bypass](https://junglewise.ai/threats/cve-2026-87133-oracle-hyperion-data-relationship-management-access-control) (high, CVSS 7.6, published 15 Sep 2026) - [CVE-2026-87132: Oracle Hyperion Data Relationship Management CSRF in Access and security](https://junglewise.ai/threats/cve-2026-87132-oracle-hyperion-data-relationship-management-csrf-in-access-and) (high, CVSS 7.6, published 15 Sep 2026) - [CVE-2026-87131: Oracle Hyperion Data Relationship Management access control bypass](https://junglewise.ai/threats/cve-2026-87131-oracle-hyperion-data-relationship-management-access-control) (high, CVSS 7.6, published 15 Sep 2026) - [CVE-2026-87130: Oracle Hyperion Data Relationship Management authentication bypass in SMTP](https://junglewise.ai/threats/cve-2026-87130-oracle-hyperion-data-relationship-management-authentication) (high, CVSS 7.4, published 15 Sep 2026) - [CVE-2026-87129: Oracle Hyperion Data Relationship Management authentication bypass](https://junglewise.ai/threats/cve-2026-87129-oracle-hyperion-data-relationship-management-authentication) (critical, CVSS 9.1, published 15 Sep 2026) - [CVE-2026-87128: Oracle Hyperion Data Relationship Management authentication bypass in HTTP](https://junglewise.ai/threats/cve-2026-87128-oracle-hyperion-data-relationship-management-authentication) (critical, CVSS 9.1, published 15 Sep 2026) - [CVE-2026-70904: Oracle Hyperion Data Relationship Management unauthorized access in access and security](https://junglewise.ai/threats/cve-2026-70904-oracle-hyperion-data-relationship-management-unauthorized-access) (high, CVSS 8.1, published 18 Aug 2026) - [CVE-2026-70903: Oracle Hyperion Data Relationship Management cross-site request forgery in Access and security](https://junglewise.ai/threats/cve-2026-70903-oracle-hyperion-data-relationship-management-cross-site-request) (high, CVSS 8.7, published 18 Aug 2026) - [CVE-2026-70902: Oracle Hyperion Data Relationship Management privilege escalation in access control](https://junglewise.ai/threats/cve-2026-70902-oracle-hyperion-data-relationship-management-privilege-escalation) (high, CVSS 7.1, published 18 Aug 2026) - [CVE-2026-70901: Oracle Hyperion Data Relationship Management CSRF in access and security](https://junglewise.ai/threats/cve-2026-70901-oracle-hyperion-data-relationship-management-csrf-in-access-and) (high, CVSS 8.1, published 18 Aug 2026) ## Most severe Oracle Hyperion Data Relationship Management vulnerabilities - [CVE-2026-70880: Oracle Hyperion Data Relationship Management authentication bypass](https://junglewise.ai/threats/cve-2026-70880-oracle-hyperion-data-relationship-management-authentication) (critical, CVSS 10, published 18 Aug 2026) - [CVE-2026-70873: Oracle Hyperion Data Relationship Management authentication bypass](https://junglewise.ai/threats/cve-2026-70873-oracle-hyperion-data-relationship-management-authentication) (critical, CVSS 9.8, published 18 Aug 2026) - [CVE-2026-70871: Oracle Hyperion Data Relationship Management authentication bypass in access control](https://junglewise.ai/threats/cve-2026-70871-oracle-hyperion-data-relationship-management-authentication) (critical, CVSS 9.8, published 18 Aug 2026) - [CVE-2026-70876: Oracle Hyperion Data Relationship Management access control bypass](https://junglewise.ai/threats/cve-2026-70876-oracle-hyperion-data-relationship-management-access-control) (critical, CVSS 9.1, published 18 Aug 2026) - [CVE-2026-87129: Oracle Hyperion Data Relationship Management authentication bypass](https://junglewise.ai/threats/cve-2026-87129-oracle-hyperion-data-relationship-management-authentication) (critical, CVSS 9.1, published 15 Sep 2026) - [CVE-2026-87128: Oracle Hyperion Data Relationship Management authentication bypass in HTTP](https://junglewise.ai/threats/cve-2026-87128-oracle-hyperion-data-relationship-management-authentication) (critical, CVSS 9.1, published 15 Sep 2026) - [CVE-2026-70884: Oracle Hyperion Data Relationship Management authentication bypass in SOAP](https://junglewise.ai/threats/cve-2026-70884-oracle-hyperion-data-relationship-management-authentication) (critical, CVSS 9.1, published 18 Aug 2026) - [CVE-2026-70883: Oracle Hyperion Data Relationship Management unauthorized access](https://junglewise.ai/threats/cve-2026-70883-oracle-hyperion-data-relationship-management-unauthorized-access) (critical, CVSS 9.1, published 18 Aug 2026) - [CVE-2026-70872: Oracle Hyperion Data Relationship Management authentication bypass in Access and security](https://junglewise.ai/threats/cve-2026-70872-oracle-hyperion-data-relationship-management-authentication) (critical, CVSS 9.1, published 18 Aug 2026) - [CVE-2026-70899: Oracle Hyperion Data Relationship Management privilege escalation in access control](https://junglewise.ai/threats/cve-2026-70899-oracle-hyperion-data-relationship-management-privilege-escalation) (high, CVSS 8.8, published 18 Aug 2026) ## Vulnerabilities per week Nothing in the last four weeks, down from 21 vulnerabilities in the four before. 0 critical against 2. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 35 | 7 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 21 | 2 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Oracle technologies - [Oracle MySQL Server](https://junglewise.ai/threats/technologies/mysql-server): 163 vulnerabilities - [Oracle Hyperion Financial Management](https://junglewise.ai/threats/technologies/hyperion-financial-management): 142 vulnerabilities - [Oracle Helidon](https://junglewise.ai/threats/technologies/helidon): 130 vulnerabilities - [Oracle MySQL Cluster](https://junglewise.ai/threats/technologies/mysql-cluster): 129 vulnerabilities - [Oracle Coherence](https://junglewise.ai/threats/technologies/coherence): 113 vulnerabilities - [Oracle E-Business Suite](https://junglewise.ai/threats/technologies/e-business-suite): 110 vulnerabilities - [Oracle WebCenter Content](https://junglewise.ai/threats/technologies/webcenter-content): 110 vulnerabilities - [Oracle Commerce Guided Search](https://junglewise.ai/threats/technologies/commerce-guided-search): 104 vulnerabilities - [Oracle Commerce Experience Manager](https://junglewise.ai/threats/technologies/commerce-experience-manager): 102 vulnerabilities - [Oracle JD Edwards EnterpriseOne Tools](https://junglewise.ai/threats/technologies/jd-edwards-enterpriseone-tools): 101 vulnerabilities - [Oracle PeopleSoft Enterprise PeopleTools](https://junglewise.ai/threats/technologies/peopletools): 101 vulnerabilities - [Oracle Java SE](https://junglewise.ai/threats/technologies/java-se): 92 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Oracle Hyperion Data Relationship Management vulnerabilities", https://junglewise.ai/threats/technologies/hyperion-data-relationship-management, 9 November 2026.