CVE-2023-22062

Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion component: Repository. The supported version that is affected is 11.2.13.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...

CVE-2023-21961

Vulnerability in the Oracle Hyperion Essbase Administration Services product of Oracle Essbase component: EAS Administration and EAS Console. The supported version that is affected is 21.4.3.0.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure whe...

CVE-2023-21961

Vulnerability in the Oracle Hyperion Essbase Administration Services product of Oracle Essbase component: EAS Administration and EAS Console. The supported version that is affected is 21.4.3.0.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure whe...

Design/Logic Flaw

Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion component: Repository. The supported version that is affected is 11.2.13.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...

Design/Logic Flaw

Vulnerability in the Oracle Hyperion Workspace product of Oracle Hyperion component: UI and Visualization. The supported version that is affected is 11.2.13.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Workspace...

Design/Logic Flaw

Vulnerability in the Oracle Hyperion Essbase Administration Services product of Oracle Essbase component: EAS Administration and EAS Console. The supported version that is affected is 21.4.3.0.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure whe...

CVE-2023-22062

CVE-2023-22062 affects Oracle Hyperion Financial Reporting (Repository component) with affected version 11.2.13.0.000. The cited vulnerability allows a low-privileged attacker with network access over HTTP to compromise the system, potentially leading to unauthorized access to data and a partial ...

CVE-2023-22060

Oracle Hyperion Workspace (UI and Visualization) is affected by CVE-2023-22060 in version 11.2.13.0.000. The flaw is an insecure privilege management issue that allows a low-privileged attacker with network access via HTTP to compromise Workspace. Attacks require user interaction and can lead to ...

CVE-2023-21961

CVE-2023-21961 affects Oracle Hyperion Essbase Administration Services (EAS Administration and EAS Console) in Oracle Essbase, specifically version 21.4.3.0.0. The root cause is insufficient input validation within EAS Administration/EAS Console, allowing a high-privilege, logged-in attacker to c...

PT-2023-4023 · Oracle · Oracle Hyperion Financial Reporting

Name of the Vulnerable Software and Affected Versions: Oracle Hyperion Financial Reporting version 11.2.13.0.000 Description: The issue is related to insecure privilege management in the Repository component of Oracle Hyperion Financial Reporting. It allows a low-privileged attacker with network...

Oracle Hyperion 安全漏洞

Oracle Hyperion is the United States Oracle Oracle company's set of financial modeling applications. The software provides financial closing, report creation, and other functions. A security vulnerability exists in Oracle Hyperion's Oracle Hyperion Financial Reporting product, which arises from a...

Oracle Essbase 安全漏洞

Oracle Hyperion and Oracle Essbase are products of Oracle Corporation.Oracle Hyperion is a set of financial modeling applications. The software provides financial closure, report production, etc. Oracle Essbase is an application. Enables organizations to quickly generate insights from...

PT-2023-3699 · Oracle · Hyperion Essbase Administration Services

Name of the Vulnerable Software and Affected Versions: Oracle Hyperion Essbase Administration Services version 21.4.3.0.0 Description: The issue is related to insufficient input validation in the EAS Administration and EAS Console components of Oracle Hyperion Essbase Administration Services. Thi...

Oracle Hyperion 安全漏洞

Oracle Hyperion is the United States Oracle Oracle company's set of financial modeling applications. The software provides financial closure, report creation, and other functions. A security vulnerability exists in Oracle Hyperion's Oracle Hyperion Workspace product, which arises from a...

PT-2023-4024 · Oracle · Oracle Hyperion Workspace

Name of the Vulnerable Software and Affected Versions: Oracle Hyperion Workspace version 11.2.13.0.000 Description: The issue is related to insecure privilege management in the UI and Visualization component of Oracle Hyperion Workspace. It allows a low-privileged attacker with network access via...

MAL-2023-2 Malicious code in @hyperion-util/deferred-value (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ee6f14ca7114d9a5fd5096b74a8d6efa41d9df7e63dfcbfa2778ba8ba7d5dc64 The OpenSSF Package Analysis project identified '@hyperion-util/deferred-value' @ 77.77.79 npm as malicious. It is considered malicious because:...

Malicious code in @hyperion-util/deferred-value (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ee6f14ca7114d9a5fd5096b74a8d6efa41d9df7e63dfcbfa2778ba8ba7d5dc64 The OpenSSF Package Analysis project identified '@hyperion-util/deferred-value' @ 77.77.79 npm as malicious. It is considered malicious because:...

Malicious code in @hyperion-util/script-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fabcfd39cc4468aaddf92dd77dc548149fa6f7f8d09de7dc5af550bf8fbc2b81 The OpenSSF Package Analysis project identified '@hyperion-util/script-loader' @ 77.77.79 npm as malicious. It is considered malicious because: ...

MAL-2023-3 Malicious code in @hyperion-util/script-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fabcfd39cc4468aaddf92dd77dc548149fa6f7f8d09de7dc5af550bf8fbc2b81 The OpenSSF Package Analysis project identified '@hyperion-util/script-loader' @ 77.77.79 npm as malicious. It is considered malicious because: ...

Malicious code in @hyperion-util/cookies (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e0ab5ff4c024f4310299914d0f443ad8ed3a4559be8770d8ed79485650e783b8 The OpenSSF Package Analysis project identified '@hyperion-util/cookies' @ 77.77.79 npm as malicious. It is considered malicious because: - The...