Lucene search
K

234 matches found

BDU FSTEC
BDU FSTEC
added 2022/10/12 12:0 a.m.1 views

The vulnerability of the EAS Console component of the Oracle Hyperion Essbase Administration Services service allows a perpetrator to gain full control over the application.

The vulnerability of the EAS Console component of the Oracle Hyperion Essbase Administration Services service is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the application...

10CVSS7.7AI score0.01813EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/09/07 12:0 a.m.2 views

The vulnerability of the Security and Provisioning component of the Oracle Essbase database management system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Security and Provisioning component of the Oracle Essbase database management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through HTTP requests...

5.9CVSS6.8AI score0.00242EPSS
Exploits0References4Affected Software1
CNVD
CNVD
added 2022/07/21 12:0 a.m.12 views

Oracle Essbase Information Disclosure Vulnerability

Oracle Essbase is an application from Oracle Corporation Oracle. Enables organizations to quickly generate insights from multidimensional data sets using what-if analysis and data visualization tools. An information disclosure vulnerability exists in the Security and Provisioning component of...

5.8CVSS5.3AI score0.00242EPSS
Exploits0References1
NCSC
NCSC
added 2022/07/20 12:0 a.m.3 views

Vulnerability fixed in Oracle Essbase

Oracle has fixed a vulnerability in Essbase Server. The vulnerability potentially allows a malicious party to launch attacks execute attacks that result in the following categories of damage: Manipulation of data. Bypassing authentication Accessing sensitive data...

5.8CVSS6.7AI score0.00242EPSS
Exploits0
ATTACKERKB
ATTACKERKB
added 2022/07/19 10:15 p.m.2 views

CVE-2022-21508

Vulnerability in Oracle Essbase component: Security and Provisioning. The supported version that is affected is 21.3. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Essbase executes to compromise Oracle Essbase. Successful attacks...

5.8CVSS6.8AI score0.00242EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2022/07/19 10:15 p.m.1 views

CVE-2022-21508

Vulnerability in Oracle Essbase component: Security and Provisioning. The supported version that is affected is 21.3. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Essbase executes to compromise Oracle Essbase. Successful attacks...

5.8CVSS7.3AI score0.00242EPSS
Exploits0References1
NVD
NVD
added 2022/07/19 10:15 p.m.11 views

CVE-2022-21508

Vulnerability in Oracle Essbase component: Security and Provisioning. The supported version that is affected is 21.3. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Essbase executes to compromise Oracle Essbase. Successful attacks...

5.8CVSS0.00242EPSS
Exploits0References1
Prion
Prion
added 2022/07/19 10:15 p.m.13 views

Design/Logic Flaw

Vulnerability in Oracle Essbase component: Security and Provisioning. The supported version that is affected is 21.3. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Essbase executes to compromise Oracle Essbase. Successful attacks...

2.7CVSS5.9AI score0.00242EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2022/07/19 9:6 p.m.64 views

CVE-2022-21508

CVE-2022-21508 affects Oracle Essbase (Security and Provisioning) with affected version 21.3. The vulnerability enables a high-privilege attacker, who has logon and user interaction, to access or modify critical Oracle Essbase data. CVSS v3.1 base score is 5.8 (Confidentiality and Integrity impac...

5.8CVSS5.4AI score0.00242EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/07/19 9:6 p.m.8 views

CVE-2022-21508

Vulnerability in Oracle Essbase component: Security and Provisioning. The supported version that is affected is 21.3. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Essbase executes to compromise Oracle Essbase. Successful attacks...

5.8CVSS6.2AI score0.00242EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/07/19 9:6 p.m.12 views

CVE-2022-21508

Vulnerability in Oracle Essbase component: Security and Provisioning. The supported version that is affected is 21.3. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Essbase executes to compromise Oracle Essbase. Successful attacks...

5.8CVSS6AI score0.00242EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/07/19 12:0 a.m.3 views

Oracle Essbase 安全漏洞

Oracle Essbase is an application from Oracle Corporation Oracle. Enables organizations to quickly generate insights from multidimensional data sets using what-if analysis and data visualization tools. An information disclosure vulnerability exists in the Security and Provisioning component of...

5.8CVSS5.7AI score0.00242EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2022/06/23 12:0 a.m.1 views

The vulnerability of the EAS Console component of the Oracle Hyperion Essbase Administration Services service allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the EAS Console component of the Oracle Hyperion Essbase Administration Services exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information through...

7.8CVSS7.3AI score0.01688EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/10 12:0 a.m.4 views

The vulnerability of the EAS Console component of the Oracle Hyperion Essbase Administration Services service allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the EAS Console component of the Oracle Hyperion Essbase Administration Services exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information through...

8.6CVSS7.7AI score0.01688EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/27 12:0 a.m.2 views

The vulnerability of the EAS Console component of the Oracle Hyperion Essbase Administration Services allows a perpetrator to execute arbitrary code.

The vulnerability of the EAS Console component of the Oracle Hyperion Essbase Administration Services exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via HTTP requests...

9.9CVSS8.2AI score0.01191EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2022/01/19 12:15 p.m.1 views

CVE-2021-35683

Vulnerability in the Oracle Essbase Administration Services product of Oracle Essbase component: EAS Console. The supported version that is affected is Prior to 11.1.2.4.047. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase...

9.9CVSS7.3AI score
Exploits0References1
NVD
NVD
added 2022/01/19 12:15 p.m.13 views

CVE-2021-35683

Vulnerability in the Oracle Essbase Administration Services product of Oracle Essbase component: EAS Console. The supported version that is affected is Prior to 11.1.2.4.047. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase...

9.9CVSS0.01191EPSS
Exploits0References1
Prion
Prion
added 2022/01/19 12:15 p.m.10 views

Design/Logic Flaw

Vulnerability in the Oracle Essbase Administration Services product of Oracle Essbase component: EAS Console. The supported version that is affected is Prior to 11.1.2.4.047. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase...

6.5CVSS9AI score0.01191EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2022/01/19 11:21 a.m.59 views

CVE-2021-35683

CVE-2021-35683 affects Oracle Essbase Administration Services (EAS Console) in Oracle Essbase; affected versions are before 11.1.2.4.047. The vulnerability enables a low-privilege, network-accessible attacker over HTTP to compromise EAS, with the potential to takeover the Essbase Administration S...

9.9CVSS9AI score0.01191EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/01/19 11:21 a.m.7 views

CVE-2021-35683

Vulnerability in the Oracle Essbase Administration Services product of Oracle Essbase component: EAS Console. The supported version that is affected is Prior to 11.1.2.4.047. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase...

9.9CVSS7.3AI score0.01191EPSS
Exploits0References1
Rows per page
Query Builder