Oracle Corp. Hyperion Essbase

Name: Oracle Corp. Hyperion Essbase
Brand: Oracle Corp.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

by severity

1critical0high3medium0low

updated 2026-10-29

vulnerabilities (4)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-5482US	critical9.8	17.9% (97th)	—	no fix	2019-09-16	≤ 11.1.2.4
CVE-2021-2433US	medium5.0	1.83% (79th)	—	no fix	2021-07-21	2 versions
CVE-2021-2435US	medium5.8	1.41% (73rd)	—	no fix	2021-07-21	≤ 11.1.2.4
CVE-2019-1547US	medium4.7OT elevated	1.16% (67th)	—	no fix	2019-09-10	≤ 11.1.2.4

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation2 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-122Heap-based Buffer Overflow1 CVEs
CWE-1357Reliance on Insufficiently Trustworthy Component1 CVEs
CWE-311Missing Encryption of Sensitive Data1 CVEs
CWE-787Out-of-bounds Write1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.