Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.0

Oracle Hyperion Essbase can be taken offline remotely

CVE-2014-4271 · published 12 years ago
Summary

The Essbase part of Oracle Hyperion versions 11.1.2.2 and 11.1.2.3 may allow a remote user to disrupt its operation. This could cause the service to become unavailable, affecting business reporting and analysis. Apply the latest patches from Oracle and restrict network access to the component.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
oracle hyperion 11.1.2.2
11.1.2.3
cpe:2.3:a:oracle:hyperion:11.1.2.2:*:*:*:*:*:*:*
Original advisory text
Unspecified vulnerability in the Hyperion Essbase component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect availability via unknown vectors related to Agent.
Unspecified vulnerability in the Hyperion Essbase component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect availability via unknown vectors related to Agent.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.0 Medium
Exploitation
3% chance of attack within 30 days
Timeline
Published17 Jul 2014
Updated30 Oct 2026
First seen29 Sep 2026
Sources
CVE-2014-4271 · NVD
Track software like this
Free during beta