CVE-2023-22010 - Vulnerability in Oracle Essbase (component: Security and Provisioning)

Back Back to CVE browser

LOW

Vulnerability in Oracle Essbase (component: Security and Provisioning)

Published Jul 18, 2023

2.2

LOW

CVSS 3.1

EPSS 0.40%

Description

Vulnerability in Oracle Essbase (component: Security and Provisioning). The supported version that is affected is 21.4.3.0.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Essbase accessible data. CVSS 3.1 Base Score 2.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N).

Affected products

Vendor Oracle Corporation Product Hyperion Essbase Default
n/a
- Version
  21.4.3.0.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Oracle Corporation

Hyperion Essbase

n/a

Version	Status	Constraints
21.4.3.0.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-26175
Advisory
https://www.oracle.com/security-alerts/cpujul2023.html
vendor-advisoryPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-26175		Advisory
https://www.oracle.com/security-alerts/cpujul2023.html		vendor-advisoryPatchVendor Advisory