Security Flaw in Oracle Hyperion Financial Reporting by Oracle

CVE-2019-2959

Summary

A vulnerability exists in Oracle Hyperion Financial Reporting, specifically in the security models component, which can be exploited by a high privileged attacker with network access via HTTP. The flaw may lead to unauthorized creation, deletion, or modification of critical data within the Hyperion environment. Successful exploitation requires human interaction from an individual other than the attacker, introducing an element of social engineering into the threat landscape. Attackers may manipulate the integrity of all accessible data in Hyperion Financial Reporting, emphasizing the need for improved security measures and user awareness.

References