CVE-2026-87147 Oracle Corporation CVE debrief

Who should care

Defenders responsible for Oracle Hyperion Data Relationship Management, security teams, and administrators of Oracle products should assess exposure and apply necessary patches or updates.

Why it matters

CVE-2026-87147 is a high-severity vulnerability in Oracle Hyperion Data Relationship Management that requires immediate attention from defenders. The vulnerability allows high privileged attackers with network access to compromise the product, potentially leading to unauthorized data modifications and access. Defenders should assess exposure, apply patches, and monitor network access and privileges.

• Potential unauthorized data modifications
• Potential unauthorized data access
• High privileged user access restrictions
• Network access monitoring and control

Technical summary

The vulnerability exists in the Access and security component of Oracle Hyperion Data Relationship Management 11.2.26.0.000. It is a difficult-to-exploit vulnerability that allows high privileged attackers with network access via HTTP to compromise the product. Successful attacks can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Data Relationship Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Data Relationship Management accessible data.

Defensive priority

High priority for defenders to assess exposure and apply patches

Recommended defensive actions

• Assess exposure of Oracle Hyperion Data Relationship Management 11.2.26.0.000
• Apply patches or updates provided by Oracle
• Monitor network access and privileges
• Review and restrict high-privileged user access
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.

Evidence notes

The vulnerability is confirmed in Oracle Hyperion Data Relationship Management 11.2.26.0.000. The CVSS score is 7.7, indicating high severity. The vulnerability allows high privileged attackers with network access via HTTP to compromise the product, potentially impacting additional products.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.