CVE-2021-2347

Vulnerability in the Hyperion Infrastructure Technology product of Oracle Hyperion component: Lifecycle Management. The supported version that is affected is 11.2.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Infrastructu...

Oracle Essbase 输入验证错误漏洞

Oracle Hyperion Essbase Administration Services is a robust, cross-platform graphical user interface that makes Essbase administration tasks easy to perform.Oracle Hyperion Essbase Administration Services 11.1.2.4. Release 21.2 contains a security vulnerability in the EAS Console component. An...

Oracle Hyperion 输入验证错误漏洞

Oracle Hyperion Essbase Administration Services is a robust, cross-platform graphical user interface that makes Essbase administration tasks easy to perform.Oracle Hyperion Essbase Administration Services 11.1.2.4. Release 21.2 contains a security vulnerability in the EAS Console component. An...

Oracle Hyperion安全漏洞

Oracle Hyperion is the United States Oracle Oracle company's set of financial modeling applications. The software provides financial closing, report creation, and other functions. A security vulnerability exists in Oracle Hyperion 11.2.5.0 that allows a highly privileged attacker to compromise...

Oracle Hyperion 输入验证错误漏洞

Oracle Hyperion is the United States Oracle Oracle company's set of financial modeling applications. The software provides financial closure, report creation, and other functions. A security vulnerability exists in Oracle Hyperion versions 11.1.2.4 and 11.2.5.0, which can be exploited by an...

Oracle Hyperion输入验证错误漏洞

Oracle Hyperion is the United States Oracle Oracle company's set of financial modeling applications. The software provides financial closure, report creation, and other functions. A security vulnerability exists in Oracle Hyperion's Hyperion Infrastructure Technology product Component: Lifecycle...

Insecure deserialization in Wire

Due to how Wire handles type information in its serialization format, malicious payloads can be passed to a deserializer. e.g. using a surrogate on the sender end, an attacker can pass information about a different type for the receiving end. And by doing so allowing the serializer to create any...

GHSA-HPW7-3VQ3-MMV6 Insecure deserialization in Wire

Due to how Wire handles type information in its serialization format, malicious payloads can be passed to a deserializer. e.g. using a surrogate on the sender end, an attacker can pass information about a different type for the receiving end. And by doing so allowing the serializer to create any...

The vulnerability of the Task Automation component of the Oracle Hyperion Financial Management application allows a perpetrator to gain read access to data, modify data, cause partial service disruption, or obtain privileged access.

The vulnerability of the Task Automation component of the Oracle Hyperion Financial Management application exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to gain read access to data, modify data, cause partial service failure, or...

The vulnerability of the JAPI component of the Hyperion Analytic Provider Services software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the JAPI component of the Hyperion Analytic Provider Services software exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2021-2244

Vulnerability in the Hyperion Analytic Provider Services product of Oracle Hyperion component: JAPI and Essbase Analytic Provider Services product of Oracle Essbase component: JAPI. Supported versions that are affected are Hyperion Analytic Provider Services 11.1.2.4 and 12.2.1.4, and Essbase...

CVE-2021-2244

Vulnerability in the Hyperion Analytic Provider Services product of Oracle Hyperion component: JAPI and Essbase Analytic Provider Services product of Oracle Essbase component: JAPI. Supported versions that are affected are Hyperion Analytic Provider Services 11.1.2.4 and 12.2.1.4, and Essbase...

CVE-2021-2158

Vulnerability in the Hyperion Financial Management product of Oracle Hyperion component: Task Automation. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Financial Management...

CVE-2021-2158

Vulnerability in the Hyperion Financial Management product of Oracle Hyperion component: Task Automation. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Financial Management...

Design/Logic Flaw

Vulnerability in the Hyperion Financial Management product of Oracle Hyperion component: Task Automation. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Financial Management...

CVE-2021-2244

Vulnerability in the Hyperion Analytic Provider Services product of Oracle Hyperion component: JAPI and Essbase Analytic Provider Services product of Oracle Essbase component: JAPI. Supported versions that are affected are Hyperion Analytic Provider Services 11.1.2.4 and 12.2.1.4, and Essbase...

Design/Logic Flaw

Vulnerability in the Hyperion Analytic Provider Services product of Oracle Hyperion component: JAPI and Essbase Analytic Provider Services product of Oracle Essbase component: JAPI. Supported versions that are affected are Hyperion Analytic Provider Services 11.1.2.4 and 12.2.1.4, and Essbase...

CVE-2021-2244

Vulnerability in the Hyperion Analytic Provider Services product of Oracle Hyperion component: JAPI and Essbase Analytic Provider Services product of Oracle Essbase component: JAPI. Supported versions that are affected are Hyperion Analytic Provider Services 11.1.2.4 and 12.2.1.4, and Essbase...

CVE-2021-2244

CVE-2021-2244 affects Oracle Hyperion Analytic Provider Services (JAPI) and Oracle Essbase Analytic Provider Services (JAPI). Affected versions are Hyperion Analytic Provider Services 11.1.2.4 and 12.2.1.4, and Essbase Analytic Provider Services 21.2. The vulnerability allows unauthenticated netw...

CVE-2021-2244

Vulnerability in the Hyperion Analytic Provider Services product of Oracle Hyperion component: JAPI and Essbase Analytic Provider Services product of Oracle Essbase component: JAPI. Supported versions that are affected are Hyperion Analytic Provider Services 11.1.2.4 and 12.2.1.4, and Essbase...