Vulnerability in Hyperion Essbase Administration Services by Oracle

CVE-2018-3142

Summary

A vulnerability exists in the Hyperion Essbase Administration Services component, notably impacting the EAS Console of Oracle Hyperion. It enables a low-privileged attacker with network access via HTTP to exploit the service, leading to unauthorized access to sensitive data. Although primarily affecting Hyperion Essbase Administration Services, successful exploitation may also compromise associated services and data. Protecting this component is crucial to prevent potential data breaches and unauthorized control over its administration features.

References