Oracle Hyperion Planning vulnerabilities

6 CVEs affecting Oracle Hyperion Planning, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-45105, published 2021-12-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-45105, published 2021-12-18. Medium severity, CVSS 5.9. EPSS: 100% chance of exploitation in the next 30 days. Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over…
CVE-2019-2904, published 2019-10-16. Critical severity, CVSS 9.8. EPSS: 14.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0 and 12.2.1.3.0. Easily…
CVE-2019-2861, published 2019-07-23. Medium severity, CVSS 4.2. EPSS: 4.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hyperion Planning component of Oracle Hyperion (subcomponent: Security). The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high…
CVE-2018-2733, published 2018-01-18. High severity, CVSS 7.6. EPSS: 1.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hyperion Planning component of Oracle Hyperion (subcomponent: Security). The supported version that is affected is 11.1.2.4.007. Difficult to exploit vulnerability allows…
CVE-2019-2770, published 2019-07-23. Medium severity, CVSS 4.5. EPSS: 1.2% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hyperion Planning component of Oracle Hyperion (subcomponent: Smart View). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows high…
CVE-2020-14764, published 2020-10-21. Medium severity, CVSS 4.2. EPSS: 0.8% chance of exploitation in the next 30 days. Vulnerability in the Hyperion Planning product of Oracle Hyperion (component: Application Development Framework). The supported version that is affected is 11.1.2.4. Difficult to exploit…