Vulnerability in Hyperion Essbase Administration Services by Oracle

CVE-2018-3140

Summary

The vulnerability affects the Hyperion Essbase Administration Services component within Oracle Hyperion, particularly through the EAS Console. It enables an unauthenticated attacker with network access via HTTP to compromise the services. While successful exploitation necessitates human interaction from an individual other than the attacker, it can lead to unauthorized update, insert, or delete capabilities affecting sensitive data. Additionally, attackers may gain unauthorized read access to specific data managed by the Hyperion Essbase Administration Services, which may also impact other connected products. This vulnerability emphasizes the importance of securing the EAS Console against potential exploits.

References