CVE-2025-21569

CVSS 3.1 Score 6.6 of 10 (medium)

Details

Published Jan 21, 2025

Summary

CVE-2025-21569 is a vulnerability affecting the Oracle Hyperion Data Relationship Management product in version 11.2.19.0.000 of Oracle Hyperion. This issue allows high privileged attackers with network access to compromise the system via HTTP. Successfully exploited vulnerabilities may result in the takeover of Oracle Hyperion Data Relationship Management. The Base Score, as per CVSS 3.1, is 6.6, impacting Confidentiality, Integrity, and Availability. The attack vector involves network access (AV:N), requires high privileges (PR:H), and there is no user interaction required (UI:N).

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Oracle Hyperion Data Relationship Management

Affected Vendors

  • Oracle Corp