Lucene search
+L

250 matches found

CNNVD
CNNVD
added 2023/07/18 12:00 a.m.27 views

Oracle Essbase 安全漏洞

Oracle Hyperion and Oracle Essbase are products of Oracle Corporation.Oracle Hyperion is a set of financial modeling applications. The software provides financial closure, report production, etc. Oracle Essbase is an application. Enables organizations to quickly generate insights from...

6CVSS7AI score0.00214EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/07/18 12:00 a.m.8 views

PT-2023-3701 · Oracle · Oracle Essbase

Name of the Vulnerable Software and Affected Versions: Oracle Essbase version 21.4.3.0.0 Description: The issue is related to insufficient input validation in the Security and Provisioning component of Oracle Essbase. Exploitation of this issue can allow an attacker to gain unauthorized access to...

2.2CVSS4AI score0.00399EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/07/18 12:00 a.m.17 views

PT-2023-3699 · Oracle · Hyperion Essbase Administration Services

Name of the Vulnerable Software and Affected Versions: Oracle Hyperion Essbase Administration Services version 21.4.3.0.0 Description: The issue is related to insufficient input validation in the EAS Administration and EAS Console components of Oracle Hyperion Essbase Administration Services. Thi...

6CVSS6.3AI score0.00214EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/07/18 12:00 a.m.11 views

Oracle Essbase 安全漏洞

Oracle Essbase is an application from Oracle Corporation Oracle. It enables organizations to quickly generate insights from multidimensional data sets using what-if analysis and data visualization tools. A security vulnerability exists in Oracle Essbase that originates in the Security and...

2.2CVSS6AI score0.00399EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/05/12 12:00 a.m.14 views

The vulnerability of the Security and Provisioning component of the Oracle Essbase database management system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Security and Provisioning component of the Oracle Essbase database management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

5.4CVSS6.6AI score0.00513EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/05/04 12:00 a.m.11 views

The vulnerability of the Security and Provisioning component of the Oracle Essbase database management system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Security and Provisioning component of the Oracle Essbase database management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

5.4CVSS6.6AI score0.00513EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/04/22 12:00 a.m.10 views

The vulnerability of the Security and Provisioning component of the Oracle Essbase database management system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Security and Provisioning component of the Oracle Essbase database management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

5.4CVSS6.6AI score0.00513EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/04/20 12:00 a.m.63 views

Oracle Essbase (April 2023 CPU)

The version of Oracle Essbase installed on the remote host is missing a security patch from the April 2023 Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities, including following that are remotely exploitable: - Vulnerability in Security and Provisioning component o...

9.8CVSS7.2AI score0.04494EPSS
SaveExploits8References11
Qualys Blog
Qualys Blog
added 2023/04/19 11:47 a.m.399 views

Oracle Patch Tuesday April 2023 Security Update Review

Oracle has released the second quarterly edition of Critical Patch Update, which contains a group of patches for 433 security vulnerabilities. Some of the vulnerabilities addressed this month impact various products. These patches address vulnerabilities in Oracle code and third-party components...

7.5CVSS9.5AI score0.99638EPSS
SaveExploits134
NCSC
NCSC
added 2023/04/19 12:00 a.m.12 views

Vulnerabilities fixed in Oracle Essbase

Oracle has fixed vulnerabilities in Oracle Essbase. The vulnerabilities allow a malicious party to cause a denial-of-service DoS or to gain access to sensitive data. ------------------.------.------------------------------------- | CVE ID | CVSS | Vector |...

9.8CVSS6.6AI score0.04494EPSS
SaveExploits7
NVD
NVD
added 2023/04/18 8:15 p.m.25 views

CVE-2023-21944

Vulnerability in Oracle Essbase component: Security and Provisioning. The supported version that is affected is 21.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks require human interaction from a...

5.3CVSS5AI score0.00513EPSS
SaveExploits0References1
OSV
OSV
added 2023/04/18 8:15 p.m.9 views

CVE-2023-21944

Vulnerability in Oracle Essbase component: Security and Provisioning. The supported version that is affected is 21.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks require human interaction from a...

5.3CVSS7.3AI score0.00513EPSS
SaveExploits0References1
OSV
OSV
added 2023/04/18 8:15 p.m.7 views

CVE-2023-21942

Vulnerability in Oracle Essbase component: Security and Provisioning. The supported version that is affected is 21.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks require human interaction from a...

5.3CVSS6.7AI score0.00513EPSS
SaveExploits0References1
NVD
NVD
added 2023/04/18 8:15 p.m.28 views

CVE-2023-21942

Vulnerability in Oracle Essbase component: Security and Provisioning. The supported version that is affected is 21.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks require human interaction from a...

5.3CVSS5AI score0.00513EPSS
SaveExploits0References1
NVD
NVD
added 2023/04/18 8:15 p.m.26 views

CVE-2023-21943

Vulnerability in Oracle Essbase component: Security and Provisioning. The supported version that is affected is 21.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks require human interaction from a...

5.3CVSS5AI score0.00513EPSS
SaveExploits0References1
OSV
OSV
added 2023/04/18 8:15 p.m.11 views

CVE-2023-21943

Vulnerability in Oracle Essbase component: Security and Provisioning. The supported version that is affected is 21.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks require human interaction from a...

5.3CVSS6.7AI score0.00513EPSS
SaveExploits0References1
Prion
Prion
added 2023/04/18 8:15 p.m.17 views

Design/Logic Flaw

Vulnerability in Oracle Essbase component: Security and Provisioning. The supported version that is affected is 21.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks require human interaction from a...

2.6CVSS5.4AI score0.00513EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/04/18 8:15 p.m.19 views

Design/Logic Flaw

Vulnerability in Oracle Essbase component: Security and Provisioning. The supported version that is affected is 21.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks require human interaction from a...

2.6CVSS5.4AI score0.00513EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/04/18 8:15 p.m.26 views

Design/Logic Flaw

Vulnerability in Oracle Essbase component: Security and Provisioning. The supported version that is affected is 21.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks require human interaction from a...

2.6CVSS5.4AI score0.00513EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/04/18 7:54 p.m.59 views

CVE-2023-21944

CVE-2023-21944 affects Oracle Essbase (Security and Provisioning), with vulnerable version 21.4. An unauthenticated attacker can access via HTTP over the network; exploitation requires user interaction and can lead to unauthorized access to data. The issue is one of several in the Oracle Essbase ...

5.3CVSS5AI score0.00513EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder