CVE-2021-2244

Vulnerability in the Hyperion Analytic Provider Services product of Oracle Hyperion (component: JAPI) and Essbase Analytic Provider Services product of Oracle Essbase (component: JAPI). Supported versions that are affected are Hyperion Analytic Provider Services 11.1.2.4 and 12.2.1.4, and Essbase Analytic Provider Services 21.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion Analytic Provider Services. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Hyperion Analytic Provider Services, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Hyperion Analytic Provider Services. CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).

• https://www.oracle.com/security-alerts/cpuapr2021.htmlPatch, Vendor Advisory
• https://www.oracle.com/security-alerts/cpujul2021.htmlVendor Advisory
• https://www.oracle.com/security-alerts/cpuapr2021.htmlPatch, Vendor Advisory
• https://www.oracle.com/security-alerts/cpujul2021.htmlVendor Advisory

Published

Apr 22, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-22434There is a memory address out of bounds vulnerability in sma…9.8
• CVE-2021-22435There is a Configuration Defect Vulnerability in Huawei Smar…9.1
• CVE-2021-22436There is a Logic Bypass vulnerability in Huawei Smartphone.S…9.1
• CVE-2021-22437There is a software integer overflow leading to a TOCTOU con…7
• CVE-2021-22438There is a Memory Buffer Improper Operation Limit Vulnerabil…9.8
• CVE-2021-22439There is a deserialization vulnerability in Huawei AnyOffice…8.1
• CVE-2021-22440There is a path traversal vulnerability in some Huawei produ…4.6
• CVE-2021-22441Some Huawei products have an integer overflow vulnerability.…5.5
• CVE-2021-22442There is an Improper Validation of Integrity Check Value Vul…7.5
• CVE-2021-22443There is an Input Verification Vulnerability in Huawei Smart…7.5
• CVE-2021-22444There is an Input Verification Vulnerability in Huawei Smart…9.8
• CVE-2021-22445There is an Input Verification Vulnerability in Huawei Smart…7.5