CVE-2025-21569: Medium severity Oracle Hyperion Data Relationship Management vulnerability

Published Jan 21, 2025

Updated

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Web Services). The supported version that is affected is 11.2.19.0.000. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Data Relationship Management. Successful attacks of this vulnerability can result in takeover of Oracle Hyperion Data Relationship Management. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).

Affected Software

2 affected components

Oracle Hyperion Data Relationship Management

Oracle Hyperion Data Relationship Management=11.2.19.0.000

Event History

Jan 21, 2025

CVE Published

via MITRE·08:53 PM

Data Sourced

via MITRE·08:53 PM

DescriptionSeverity

Data Sourced

via NVD·09:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-21569?

CVE-2025-21569 is classified as a difficult to exploit vulnerability that requires high privileges to compromise.

How do I fix CVE-2025-21569?

To resolve CVE-2025-21569, ensure that you apply the latest security patches provided by Oracle for Hyperion Data Relationship Management.

Who is affected by CVE-2025-21569?

CVE-2025-21569 affects users of Oracle Hyperion Data Relationship Management version 11.2.19.0.000.

What component of Oracle Hyperion is impacted by CVE-2025-21569?

CVE-2025-21569 impacts the Web Services component of Oracle Hyperion Data Relationship Management.

Can CVE-2025-21569 be exploited remotely?

Yes, CVE-2025-21569 can potentially be exploited remotely by a high privileged attacker with network access via HTTP.