PT-2025-4289 · Oracle · Oracle Hyperion Data Relationship Management

Name of the Vulnerable Software and Affected Versions: Oracle Hyperion Data Relationship Management version 11.2.19.0.000 Description: The issue is related to the Access and Security component of Oracle Hyperion Data Relationship Management, allowing a high-privileged attacker with network access...

CVE-2025-21569: Incorrect Authorization

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Web Services. The supported version that is affected is 11.2.19.0.000. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

Oracle Hyperion 安全漏洞

Oracle Hyperion is a suite of financial modeling applications from Oracle Corporation. It provides financial close, report creation, and other functions.Hyperion Data Relationship Management is one of the data relationship management components. A security vulnerability exists in Oracle Hyperion...

Oracle Hyperion 安全漏洞

Oracle Hyperion is a suite of financial modeling applications from Oracle Corporation USA. The software provides financial closing, report creation, and other functions. A security vulnerability exists in Oracle Hyperion version 11.2.19.0.000. An attacker could exploit this vulnerability to gain...

PT-2025-4290 · Oracle · Oracle Hyperion Data Relationship Management

Name of the Vulnerable Software and Affected Versions: Oracle Hyperion Data Relationship Management version 11.2.19.0.000 Description: The issue is related to the Web Services component of Oracle Hyperion Data Relationship Management, allowing a high-privileged attacker with network access via HT...

CVE-2025-21568: Incorrect Authorization

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and Security. The supported version that is affected is 11.2.19.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

Malicious code in hyperion-react-testapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99a7ef31fe91a90b5e4780028e2f80cfe27e522aa931ce419fa5bed74d0c17fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11992 Malicious code in hyperion-react-testapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99a7ef31fe91a90b5e4780028e2f80cfe27e522aa931ce419fa5bed74d0c17fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in hyperion-react-testapp

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

The vulnerability of the UI and Visualization components of the Oracle Hyperion BI+ service allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the UI and Visualization component of the Oracle Hyperion BI+ service is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP protocol...

CVE-2024-21257

Vulnerability in the Oracle Hyperion BI+ product of Oracle Hyperion component: UI and Visualization. The supported version that is affected is 11.2.18.0.000. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware...

CVE-2024-21257

Vulnerability in the Oracle Hyperion BI+ product of Oracle Hyperion component: UI and Visualization. The supported version that is affected is 11.2.18.0.000. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware...

CVE-2024-21257

Vulnerability in the Oracle Hyperion BI+ product of Oracle Hyperion component: UI and Visualization. The supported version that is affected is 11.2.18.0.000. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware...

CVE-2024-21257

CVE-2024-21257 affects Oracle Hyperion BI+ (UI and Visualization) 11.2.18.0.000. A vulnerability due to insufficient input validation in the UI/Visualization component allows a low-privileged attacker with network-adjacent access and user interaction to read a subset of data. Exploitation require...

Oracle Hyperion 安全漏洞

Oracle Hyperion is a suite of financial modeling applications from Oracle Corporation USA. The software provides financial closure, report creation, and other functions. A security vulnerability exists in Oracle Hyperion's Oracle Hyperion BI+ version 11.2.18.0.000. An attacker could exploit the...

CVE-2024-21257: Undefined Security Weakness

Vulnerability in the Oracle Hyperion BI+ product of Oracle Hyperion component: UI and Visualization. The supported version that is affected is 11.2.18.0.000. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware...

PT-2024-7154 · Oracle · Oracle Hyperion

Name of the Vulnerable Software and Affected Versions: Oracle Hyperion BI+ version 11.2.18.0.000 Description: The issue is related to insufficient input validation in the UI and Visualization component of Oracle Hyperion BI+. It allows a low-privileged attacker to compromise Oracle Hyperion BI+ a...

Malicious code in hyperion-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfaf98b1da6db2cef1cd44d1a761b02f9c3c4e93ecfb3bf8d8ffd70570c2305e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in hyperion-global

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-8825 Malicious code in hyperion-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfaf98b1da6db2cef1cd44d1a761b02f9c3c4e93ecfb3bf8d8ffd70570c2305e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...