Security Flaw in Oracle Hyperion Planning Affects Data Integrity

CVE-2019-2861

What is CVE-2019-2861?

A security flaw in the Oracle Hyperion Planning component enables a privileged attacker with network access via HTTP to potentially compromise the system. Exploitation of this vulnerability necessitates human interaction from another individual, which complicates the attack process. Once successfully executed, it could lead to unauthorized actions like the creation, deletion, or modification of critical data, affecting all data accessible within Oracle Hyperion Planning.

References