Skip to content
OpenAdvisories
Medium WID-SEC-2026-1202 6 CVEs

Oracle Hyperion: Mehrere Schwachstellen

Published Apr 21, 2026 · Updated Apr 21, 2026 · de-DE

Vendor: Oracle Product: Hyperion Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Hyperion ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Product

Oracle Hyperion bietet Lösungen für Business Intelligence, Planung und Konsolidierung.

Vulnerabilities 6

  • High 8.2
    CVE-2025-66566

    yawkat LZ4 Java has a possible information leak in Java safe decompressor

    yawkat LZ4 Java provides LZ4 compression for Java. Insufficient clearing of the output buffer in Java-based decompressor implementations in lz4-java 1.10.0 and earlier allows remote attackers to read previous buffer contents via crafted compressed input. In a…

    yawkat lz4-java zipkin spark-4.0-scala-2.13 Debian Ubuntu Wolfi Maven
  • High 7.5
    CVE-2025-64775

    Apache Struts: File leak in multipart request processing causes disk exhaustion (DoS)

    Denial of Service vulnerability in Apache Struts, file leak in multipart request processing causes disk exhaustion. This issue affects Apache Struts: from 2.0.0 through 6.7.0, from 7.0.0 through 7.0.3. Users are recommended to upgrade to version 6.8.0 or 7.1.…

    Apache Software Foundation Apache Struts org.apache.struts:struts2-core Maven
  • High 7.5
    CVE-2025-9086

    Out of bounds read for cookie path

    1. A cookie is set using the `secure` keyword for `https://target` 2. curl is redirected to or otherwise made to speak with `http://target` (same hostname, but using clear text HTTP) using the same cookie set 3. The same cookie name is set - but with only a s…

    curl curl curl curl Debian Ubuntu Alpine
  • High 7.1
    CVE-2025-65018 Public exploit

    LIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`

    LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, there is a heap buffer overflow vulnerability in the libpng simplified API functio…

    pnggroup libpng openjpeg2 fltk Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 6.9
    CVE-2025-54571

    ModSecurity's Insufficient Return Value Handling can Lead to XSS and Source Code Disclosure

    ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. In versions 2.9.11 and below, an attacker can override the HTTP response’s Content-Type, which could lead to several issues depending on the HTTP sc…

    owasp-modsecurity ModSecurity modsecurity modsecurity-apache Debian Ubuntu Azure Linux
  • Medium 5.2
    CVE-2026-35244

    Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Managem…

    Oracle Oracle Hyperion Infrastructure Technology

Revision history

  1. #1

    Initiale Fassung

References