CVE-2021-2349
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Vulnerability in the Hyperion Essbase Administration Services product of Oracle Essbase (component: EAS Console). Supported versions that are affected are 11.1.2.4 and 21.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion Essbase Administration Services. While the vulnerability is in Hyperion Essbase Administration Services, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Hyperion Essbase Administration Services accessible data. CVSS 3.1 Base Score 8.6 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).
Una vulnerabilidad en el producto Hyperion Essbase Administration Services de Oracle Essbase (componente: EAS Console). Las versiones compatibles que están afectadas son 11.1.2.4 y 21.2. Una vulnerabilidad explotable fácilmente, permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a Hyperion Essbase Administration Services. Mientras la vulnerabilidad se encuentra en Hyperion Essbase Administration Services, los ataques pueden afectar significativamente a productos adicionales. Los ataques con éxito de esta vulnerabilidad pueden resultar en el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Hyperion Essbase Administration Services. CVSS 3.1 Puntuación Base 8.6 (Impactos en la Confidencialidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N)
CVSS Scores
SSVC
- Decision:Attend
Timeline
- 2020-12-09 CVE Reserved
- 2021-07-20 CVE Published
- 2024-08-06 EPSS Updated
- 2024-09-26 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (1)
URL | Tag | Source |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
https://www.oracle.com/security-alerts/cpujul2021.html | 2021-07-23 |
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Oracle Search vendor "Oracle" | Hyperion Essbase Administration Services Search vendor "Oracle" for product "Hyperion Essbase Administration Services" | 11.1.2.4 Search vendor "Oracle" for product "Hyperion Essbase Administration Services" and version "11.1.2.4" | - |
Affected
| ||||||
Oracle Search vendor "Oracle" | Hyperion Essbase Administration Services Search vendor "Oracle" for product "Hyperion Essbase Administration Services" | 21.2 Search vendor "Oracle" for product "Hyperion Essbase Administration Services" and version "21.2" | - |
Affected
|