Security Flaw in Oracle Hyperion Financial Management Product

CVE-2020-2777

Summary

A vulnerability exists in Oracle's Hyperion Financial Management product, specifically within the Security component. This flaw allows high-privileged attackers with network access via HTTP to potentially compromise the application's functionality. Although exploiting this vulnerability is challenging, it necessitates human interaction from an individual other than the attacker. Successful exploitation can lead to unauthorized actions such as the creation, deletion, or modification of critical data, raising substantial risks for the integrity of all accessible data within Hyperion Financial Management.

References