Task Automation Vulnerability in Oracle Hyperion Financial Management

CVE-2021-2158

Summary

A vulnerability in the Task Automation component of Oracle Hyperion Financial Management allows attackers with high privileges and network access via HTTP to compromise the software. Successful exploitation requires interaction from a separate user, leading to unauthorized updates, inserts, or deletions of accessible data. Additionally, attackers may gain unauthorized read access to certain data, as well as the ability to partially disrupt the service, potentially affecting the confidentiality, integrity, and availability of the system. Mitigation strategies should be implemented to secure affected instances.

References