CVE-2021-2347

Vulnerability in the Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Management). The supported version that is affected is 11.2.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Infrastructure Technology. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Hyperion Infrastructure Technology accessible data as well as unauthorized update, insert or delete access to some of Hyperion Infrastructure Technology accessible data. CVSS 3.1 Base Score 5.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N).

• https://www.oracle.com/security-alerts/cpujul2021.htmlPatch, Vendor Advisory
• https://www.oracle.com/security-alerts/cpujul2021.htmlPatch, Vendor Advisory

Published

Jul 21, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-23450All versions of package dojo are vulnerable to Prototype Pol…9.8
• CVE-2021-23451The package otp-generator before 3.0.0 are vulnerable to Ins…9.8
• CVE-2021-23452This affects all versions of package x-assign. The global pr…9.8
• CVE-2021-2346Vulnerability in the Oracle Commerce Guided Search / Oracle …5.4
• CVE-2021-23460The package min-dash before 3.8.1 are vulnerable to Prototyp…7.5
• CVE-2021-23463The package com.h2database:h2 from 1.4.198 and before 2.0.20…9.1
• CVE-2021-23470This affects the package putil-merge before 3.8.0. The merge…9.8
• CVE-2021-23472This affects versions before 1.19.1 of package bootstrap-tab…6.1
• CVE-2021-2348Vulnerability in the Oracle Commerce Guided Search / Oracle …4.3
• CVE-2021-23484The package zip-local before 0.3.5 are vulnerable to Arbitra…9.8
• CVE-2021-2349Vulnerability in the Hyperion Essbase Administration Service…8.6
• CVE-2021-23490The package parse-link-header before 2.0.0 are vulnerable to…7.5