CVE-2021-2349

CVE-2021-2349 affects Oracle Hyperion Essbase Administration Services (EAS Console). Affected are 11.1.2.4 and 21.2. The flaw allows an unauthenticated attacker with network access via HTTP to compromise EAS, potentially leading to unauthorized access to all EAS data. CVSSv3.1 base score is 8.6 (...

Vulnerabilities fixed in Oracle Hyperion

Oracle has fixed vulnerabilities in the following Oracle Hyperion products: Hyperion Analytic Provider Services Hyperion BI+ Hyperion Essbase Hyperion Infrastructure Technology Hyperion Planning Hyperion Lifecycle Management The vulnerabilities allow an unauthenticated malicious person with netwo...

CVE-2018-3140

Vulnerability in the Hyperion Essbase Administration Services component of Oracle Hyperion subcomponent: EAS Console. The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion Essbase...

CVE-2018-3142

Vulnerability in the Hyperion Essbase Administration Services component of Oracle Hyperion subcomponent: EAS Console. The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Hyperion Essbase...

Design/Logic Flaw

Vulnerability in the Hyperion Essbase Administration Services component of Oracle Hyperion subcomponent: EAS Console. The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion Essbase...

Design/Logic Flaw

Vulnerability in the Hyperion Essbase Administration Services component of Oracle Hyperion subcomponent: EAS Console. The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Hyperion Essbase...

CVE-2018-3142

Vulnerability in the Hyperion Essbase Administration Services component of Oracle Hyperion subcomponent: EAS Console. The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Hyperion Essbase...

CVE-2018-3140

CVE-2018-3140 affect: Oracle Hyperion Essbase Administration Services (EAS) Console, part of Hyperion Essbase Administration Services. The vulnerability is exploitable via HTTP without authentication on affected 11.1.2.4 deployments. Successful exploitation can lead to unauthorized update/insert/...

CVE-2018-3141

Vulnerability in the Hyperion Essbase Administration Services component of Oracle Hyperion subcomponent: EAS Console. The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion Essbase...

CVE-2018-3142

CVE-2018-3142 affects Oracle Hyperion Essbase Administration Services (EAS Console) version 11.1.2.4. The vulnerability resides in EAS Console and can be exploited by a low-privilege attacker with network access via HTTP to compromise the Hyperion EAS Services. CVSSv3.0 base score is 7.7 (Confide...

Unspecified Vulnerability in Oracle Hyperion Essbase Administration Services

Oracle Hyperion Essbase Administration Services is a cross-platform GUI that makes Essbase administration tasks easy to perform. An unspecified vulnerability exists in the EAS Console component in Oracle Hyperion Essbase Administration Services 11.1.2.4. An attacker could exploit unauthorized...

Design/Logic Flaw

Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 12.1.4, 12.2.2, and 12.3.2; the Oracle Health Sciences Information Manager component in Oracle Health Sciences Applications 1.2.8.3, 2.0.2.3, and 3.0.1.0; the Oracle Healthcare Maste...

CVE-2016-0635

The connected Nessus/NASL records tie CVE-2016-0635 to the Oracle Siebel CRM knowledge component (AnswerFlow Spring Framework) in Siebel CRM. Affected versions are 8.5.1.0–8.5.1.7 and 8.6.0. The vulnerability in the Oracle Knowledge component can be exploited remotely over HTTP by a low-privilege...

CVE-2016-0635

Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 12.1.4, 12.2.2, and 12.3.2; the Oracle Health Sciences Information Manager component in Oracle Health Sciences Applications 1.2.8.3, 2.0.2.3, and 3.0.1.0; the Oracle Healthcare Maste...

CVE-2014-4271

Technical details for CVE-2014-4271 are not provided in the supplied documents. Monitor for updates from official advisories.