Vulnerability in Oracle Hyperion Financial Reporting Repository

CVE-2021-35665

Summary

A vulnerability in the Oracle Hyperion Financial Reporting product allows unauthenticated attackers with network access via HTTP to compromise the system. Successful exploits may require human interaction from a user other than the attacker, potentially leading to unauthorized updates, inserts, or deletions of data. Additionally, the vulnerability enables unauthorized read access to certain accessible data within the Hyperion Financial Reporting application. This risk underscores the necessity for robust security practices to protect sensitive financial information.

References