CVE-2026-70902: hyperion data relationship management 11.2.25.0.000; +1 more affected products

CVE-2026-70902. CVSS 3.1 base score 7.1 (HIGH, Vendor/CNA). EPSS 0.00159 (percentile 0.04639), scored 21-Oct-2026.

Affected technology

hyperion data relationship management · 11.2.25.0.000
oracle

Oracle Hyperion Data Relationship Management · 11.2.25.0.000
Oracle Corporation

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Low privileged attacker with logon can the infrastructure where Oracle Hyperion Data Relationship Management executes to compromise Oracle Hyperion Data Relationship Management. Vendor/CNA’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and integrity impact as high; availability impact as none.

Published 22-Oct-2026 20:55 UTC

CWE: CWE-284
CCR priority: 28.4 /100 (P4)
CVSS 3.1: 7.1 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N · Vendor/CNA
EPSS: 0.00159 · percentile 0.04639 · 2026-10-21
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-22 20:50:20.011821+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-70902.html