CVE-2021-2158

Vulnerability in the Hyperion Financial Management product of Oracle Hyperion component: Task Automation. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Financial Management...

CVE-2021-2244

Vulnerability in the Hyperion Analytic Provider Services product of Oracle Hyperion component: JAPI and Essbase Analytic Provider Services product of Oracle Essbase component: JAPI. Supported versions that are affected are Hyperion Analytic Provider Services 11.1.2.4 and 12.2.1.4, and Essbase...

CVE-2021-2244

Vulnerability in the Hyperion Analytic Provider Services product of Oracle Hyperion component: JAPI and Essbase Analytic Provider Services product of Oracle Essbase component: JAPI. Supported versions that are affected are Hyperion Analytic Provider Services 11.1.2.4 and 12.2.1.4, and Essbase...

CVE-2021-2244

CVE-2021-2244 affects Oracle Hyperion Analytic Provider Services (JAPI) and Oracle Essbase Analytic Provider Services (JAPI). Affected versions are Hyperion Analytic Provider Services 11.1.2.4 and 12.2.1.4, and Essbase Analytic Provider Services 21.2. The vulnerability allows unauthenticated netw...

CVE-2021-2158

Vulnerability in the Hyperion Financial Management product of Oracle Hyperion component: Task Automation. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Financial Management...

CVE-2021-2158

Vulnerability in the Hyperion Financial Management product of Oracle Hyperion component: Task Automation. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Financial Management...

CVE-2021-2158

CVE-2021-2158 affects Oracle Hyperion Financial Management (HFM) with the Task Automation component, specifically version 11.1.2.4. Multiple sources (NVD, Red Hat, CNVD, CVE listings) describe a vulnerability that is exploitable by a high-privileged attacker with network access over HTTP, with us...

PT-2021-2918

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Management version 11.1.2.4 Description The issue exists due to insufficient input validation in the Task Automation component of Oracle Hyperion Financial Management. This allows a remote attacker to read data, modif...

CVE-2021-2244: Undefined Security Weakness

Vulnerability in the Hyperion Analytic Provider Services product of Oracle Hyperion component: JAPI and Essbase Analytic Provider Services product of Oracle Essbase component: JAPI. Supported versions that are affected are Hyperion Analytic Provider Services 11.1.2.4 and 12.2.1.4, and Essbase...

CVE-2021-2158: Undefined Security Weakness

Vulnerability in the Hyperion Financial Management product of Oracle Hyperion component: Task Automation. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Financial Management...

PT-2021-2921

Name of the Vulnerable Software and Affected Versions Hyperion Analytic Provider Services versions 11.1.2.4 and 12.2.1.4 Essbase Analytic Provider Services version 21.2 Description The issue is related to insufficient input validation in the JAPI component of the affected software, allowing an...

Unspecified Vulnerability in Oracle Hyperion Financial Management (CNVD-2021-33843)

Oracle Hyperion Financial Management is a comprehensive Web-based application that provides global financial consolidation, reporting, and analysis capabilities through a highly scalable software solution. A security vulnerability exists in the Task Automation component of Oracle Hyperion Financi...

Oracle Hyperion Financial Management 安全漏洞

Oracle Hyperion Financial Management is a comprehensive Web-based application that provides global financial consolidation, reporting, and analysis capabilities through a highly scalable software solution. A security vulnerability exists in the Task Automation component of Oracle Hyperion Financi...

Oracle Hyperion 输入验证错误漏洞

Oracle Hyperion is the United States Oracle Oracle company's set of financial modeling applications. The software provides financial closure, report creation, and other functions. An input validation error vulnerability exists in Hyperion Analytic Provider Services JAPI 11.1.2.4, 12.2.1.4, which...

Vulnerabilities fixed in Oracle Hyperion

Oracle has fixed vulnerabilities in the following Oracle Hyperion products: Hyperion Infrastructure Technology Hyperion Financial Reporting The vulnerabilities allow an unauthenticated malicious person with network access to the vulnerable system may be able to launch attacks execute attacks that...

CVE-2020-27148

The TIBCO EBX Add-on for Oracle Hyperion EPM, TIBCO EBX Data Exchange Add-on, and TIBCO EBX Insight Add-on components of TIBCO Software Inc.'s TIBCO EBX Add-ons contain a vulnerability that theoretically allows a low privileged attacker with network access to execute an XML External Entity XXE...

PT-2021-11312

Name of the Vulnerable Software and Affected Versions: TIBCO EBX Add-ons versions 4.4.2 and below Description: The TIBCO EBX Add-on for Oracle Hyperion EPM, TIBCO EBX Data Exchange Add-on, and TIBCO EBX Insight Add-on components of TIBCO Software Inc.'s TIBCO EBX Add-ons contain a vulnerability...

The vulnerability of the IQR-Foundation component of the Oracle Hyperion BI+ service allows a intruder to gain unauthorized access to protected information.

The vulnerability of the IQR-Foundation component of the Oracle Hyperion BI+ service is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information via the HTTP network protocol...

The vulnerability of the IQR-Foundation component of the Oracle Hyperion BI+ service allows a intruder to gain unauthorized access to protected information.

The vulnerability of the IQR-Foundation component of the Oracle Hyperion BI+ service is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information via the HTTP network protocol...

The vulnerability of the Shared Services component of the Hyperion Lifecycle Management system allows a attacker to access data for modification, addition, or deletion.

The vulnerability of the Shared Services component of the Hyperion Lifecycle Management system is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data using the HTTP network protocol...