EUVD-2026-61846
GHSA-g5w4-h9xg-w532
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessIdentify DRM HTTPS endpoint
-
DeliverySend unauthenticated request to Access/Security component
-
ExploitBypass authentication gate
-
ExecutionExfiltrate full DRM data repository
-
ImpactSelectively modify DRM records
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V8 - Authorization Access control enforcement
MITRE ATT&CK
1 technique across 1 tactic: Defense Evasion The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | No special conditions required beyond network access to the HTTPS interface of Oracle Hyperion Data Relationship Management 11.2.25.0.000. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms remote unauthenticated exploitation against any accessible instance with no prerequisite configuration, credentials, or user interaction. Exploitation is limited by: (1) network reachability - organizations with DRM isolated behind firewalls or restricted VPN access reduce exposure significantly; (2) version specificity - only version 11.2.25.0.000 is confirmed affected; (3) no availability impact - attackers cannot crash or deny service through this vulnerability alone. |
| Impact | The CVSS 3.1 score of 8.2 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) accurately reflects a serious, easily exploitable flaw: network-reachable, low complexity, no authentication or user interaction required. The high confidentiality impact is significant given DRM typically stores sensitive organizational structure data, cost center hierarchies, account mappings, and entity relationships that feed financial reporting systems. The low integrity impact (I:L) suggests bounded write capability - partial data modification rather than full control. No EPSS data was provided, so exploitation probability cannot be quantified independently. The vulnerability is not listed in CISA KEV and no POC is known, which moderates immediate operational urgency. However, the PR:N vector with Authentication Bypass tagging makes this a straightforward target if the DRM interface is Internet-facing or accessible to untrusted network segments. Organizations with DRM deployed in a DMZ or accessible via VPN without additional access controls should treat this as high priority. |
| Exploit ScenarioDerived | An attacker with HTTPS network access to the DRM application server sends a crafted unauthenticated request to the Access and Security component, bypassing the authentication gate. The attacker then retrieves the full DRM data repository - including organizational hierarchies, account structures, and dimensional metadata - and may also perform targeted inserts, updates, or deletes within the scope of the integrity impact. No public exploit code is known at time of analysis, but the low complexity and absence of prerequisites make independent exploit development straightforward. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Aug 19, 2026
Authentication bypass in Oracle Hyperion Data Relationship Management 11.2.25.0.000 exposes all DRM-managed master data to unauthenticated remote attackers over HTTPS. The flaw resides in the Access and Security component - the gatekeeper for the application - and permits complete read access to critical DRM data alongside limited unauthorized write capability. No public exploit or CISA KEV listing has been identified at time of analysis, but the CVSS vector (PR:N, AC:L) confirms trivial unauthenticated exploitability from any network-adjacent position with HTTPS reachability.
RemediationAI
Apply the patch released as part of Oracle's Critical Patch Update for August 2026, available via the Oracle advisory at https://www.oracle.com/security-alerts/cspuaug2026.html. The exact patched build version is not independently confirmed from the available data - consult My Oracle Support (MOS) for the specific patch number targeting version 11.2.25.0.000. As a compensating control pending patching, restrict network access to the DRM HTTPS interface at the firewall or load-balancer layer to trusted IP ranges only, preventing unauthenticated internet-facing exposure; this materially reduces the attack surface given the AV:N vector. Additionally, enable web application firewall (WAF) rules to monitor for anomalous unauthenticated API requests to the Access and Security endpoint. Note that network restriction does not remediate the underlying flaw and must be replaced by the vendor patch.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
Oracle Hyperion Data Relationship Management is an enterprise master data management (MDM) platform used primarily in financial planning, budgeting, and analytics environments to govern dimensional hierarchies across EPM (Enterprise Performance Management) systems such as Hyperion Planning and Essbase. The vulnerability is located in the 'Access and Security' component, which governs authentication and authorization to the DRM web interface and APIs, exposed over HTTPS. The tag 'Authentication Bypass' indicates the flaw allows the security layer to be circumvented entirely rather than exploited through credential abuse. No CWE is formally assigned, but the behavior maps conceptually to CWE-287 (Improper Authentication) or CWE-306 (Missing Authentication for Critical Function). The affected version is 11.2.25.0.000 per Oracle's advisory.
Know when Hyperion Data Relationship Management gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Network-exposed HTTPS interface, no credentials required per authentication bypass; confidentiality high, integrity low, availability unaffected per described impact.
Primary rating from Vendor (oracle).
CVSS VectorVendor: oracle
DescriptionCVE.org
Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Hyperion Data Relationship Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Data Relationship Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Hyperion Data Relationship Management accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N).
Executive ViewAI
Oracle Hyperion Data Relationship Management 11.2.25.0.000 contains an authentication bypass vulnerability that allows unauthenticated attackers to access and modify all master data managed by the platform. This exposure threatens data integrity and confidentiality of critical business information without requiring valid credentials. No vendor-released patch identified at time of analysis, creating an immediate risk window for organizations running this version.
Implement network-level access controls restricting HTTPS connectivity to the DRM platform to authenticated internal networks only; deploy data loss prevention (DLP) tools to monitor for bulk reads of master data; implement real-time alerting and logging of all read/write operations to the Access and Security component; conduct a complete 90-day access log audit to identify any prior unauthorized exposure; establish daily security reviews of DRM access patterns until vendor patch is released and deployed.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursio
JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Lo
By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be
This affects the package codemirror before 5.58.2; the package org.apache.marmotta.webjars:codemirror before 5.58.2. Rat
Complete takeover of Oracle Hyperion Data Relationship Management 11.2.25.0.000 is possible by remote, unauthenticated a
Full remote takeover of Oracle Hyperion Data Relationship Management 11.2.25.0.000 is possible by an unauthenticated att
Full product takeover of Oracle Hyperion Data Relationship Management 11.2.25.0.000 is achievable by a remote, unauthent
CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Rated high severity (CVSS 8.8), th
Full takeover of Oracle Hyperion Data Relationship Management 11.2.25.0.000 is possible when an attacker who already hol
Unauthenticated remote attackers can bypass authentication in Oracle Hyperion Data Relationship Management version 11.2.
Unauthenticated data compromise in Oracle Hyperion Data Relationship Management 11.2.25.0.000 allows a remote attacker t
Unauthorized data compromise in Oracle Hyperion Data Relationship Management 11.2.25.0.000 (Access and security componen
Exploit-DB