Vulnerability in Oracle Hyperion Essbase Administration Services

CVE-2023-21961

Summary

A vulnerability exists in the Oracle Hyperion Essbase Administration Services, specifically within the EAS Administration and EAS Console components. An attacker with privileged credentials can exploit this vulnerability to gain unauthorized access to sensitive data within the Oracle Hyperion environment. This exploitation can potentially lead to a significant compromise of various products integrated with the Oracle Hyperion system, as the effects of the breach may extend beyond the compromised service. Organizations using the affected version, 21.4.3.0.0, should prioritize patching and enhancing their security posture to mitigate risks associated with unauthorized data access.

References