Vulnerability in Hyperion Analytic Provider Services by Oracle

CVE-2020-14768

Summary

The vulnerability present in Oracle's Hyperion Analytic Provider Services enables low privileged attackers with physical access to potentially compromise the service. Exploitation necessitates human interaction from a third party, allowing for unauthorized updates, inserts, and deletions of data, as well as unauthorized read access. Attackers may also be able to inflict partial denial of service (partial DoS) on the service. Mitigation is essential to protect against potential data breaches and service disruptions.

References