Task Automation Vulnerability in Oracle Hyperion Financial Management

CVE-2021-2158

What is CVE-2021-2158?

A vulnerability in the Task Automation component of Oracle Hyperion Financial Management allows attackers with high privileges and network access via HTTP to compromise the software. Successful exploitation requires interaction from a separate user, leading to unauthorized updates, inserts, or deletions of accessible data. Additionally, attackers may gain unauthorized read access to certain data, as well as the ability to partially disrupt the service, potentially affecting the confidentiality, integrity, and availability of the system. Mitigation strategies should be implemented to secure affected instances.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References