CVE-2026-70870Oracle · Hyperion_data_relationship_management
Vulnerability data via NVD (ingested)
Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Web Client - Unicode). The supported version that is affected is 11.2.23.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Data Relationship Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hyperion Data Relationship Management. CVSS 3.1 Base Score 8.2 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L).
External references
Search for exposed instances
Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).
vuln:CVE-2026-70870product:"Oracle Hyperion Data Relationship Management" version:"11.2.25.0.000"http.html:"Hyperion Data Relationship Management"More intel sources (5)
vuln:CVE-2026-70870vulnerabilities.cve_id: CVE-2026-70870CVE-2026-70870CVE-2026-70870"CVE-2026-70870" exploit -site:nvd.nist.gov