Théo Louis-Tisserand

**Name of the Vulnerable Software and Affected Versions** Oracle Hyperion Essbase Administration Services version 21.4.3.0.0 **Description** The issue is related to insufficient input validation in the EAS Administration and EAS Console components of Oracle Hyperion Essbase Administration Services. This allows a high-privileged attacker with logon to the infrastructure where Oracle Hyperion Essbase Administration Services executes to compromise the service. Successful attacks can result in unauthorized access to critical data or complete access to all accessible data. The vulnerability may significantly impact additional products. **Recommendations** For version 21.4.3.0.0, consider restricting access to the EAS Administration and EAS Console components until a patch is available. As a temporary workaround, limit the use of the HTTP protocol to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Oracle Essbase versions prior to 11.1.2.4.046 Oracle Essbase versions prior to 21.3 Description: The issue allows a low-privileged attacker with network access via HTTP to compromise Essbase Administration Services, potentially resulting in unauthorized access to critical data or complete access to all accessible data. While the vulnerability is in Essbase Administration Services, attacks may significantly impact additional products. Recommendations: For Oracle Essbase versions prior to 11.1.2.4.046, update to version 11.1.2.4.046 or later. For Oracle Essbase versions prior to 21.3, update to version 21.3 or later.

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.2.6 through 12.2.10 Description: The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Shipping Execution, resulting in unauthorized creation, deletion, or modification access to critical data or all accessible data, as well as unauthorized access to critical data or complete access to all accessible data. Recommendations: For versions 12.2.6 through 12.2.10, update to a version that includes the fix for this issue to prevent exploitation.

Name of the Vulnerable Software and Affected Versions: Oracle Essbase versions prior to 11.1.2.4.046 Oracle Essbase versions prior to 21.3 Description: The issue allows an unauthenticated attacker with network access via HTTP to compromise Essbase Administration Services, resulting in unauthorized read access to a subset of accessible data. The vulnerability is easily exploitable and affects the EAS Console component. Recommendations: For Oracle Essbase versions prior to 11.1.2.4.046, update to version 11.1.2.4.046 or later. For Oracle Essbase versions prior to 21.3, update to version 21.3 or later.

Name of the Vulnerable Software and Affected Versions: Oracle Essbase versions prior to 11.1.2.4.046 Oracle Essbase versions prior to 21.3 Description: The issue allows a low-privileged attacker with network access via HTTP to compromise Essbase Administration Services, potentially impacting additional products. Successful attacks can result in unauthorized access to critical data, complete access to all Essbase Administration Services accessible data, as well as unauthorized update, insert, or delete access to some of the accessible data. Recommendations: For Oracle Essbase versions prior to 11.1.2.4.046, update to version 11.1.2.4.046 or later. For Oracle Essbase versions prior to 21.3, update to version 21.3 or later.

Name of the Vulnerable Software and Affected Versions: Oracle Essbase versions prior to 11.1.2.4.046 Oracle Essbase versions prior to 21.3 Description: The issue allows an unauthenticated attacker with network access via HTTP to compromise Essbase Administration Services. Successful attacks can result in the unauthorized ability to cause a hang or frequently repeatable crash of Essbase Administration Services. Recommendations: For versions prior to 11.1.2.4.046, update to version 11.1.2.4.046 or later. For versions prior to 21.3, update to version 21.3 or later.

**Name of the Vulnerable Software and Affected Versions** Oracle Essbase versions prior to 11.1.2.4.046 Oracle Essbase versions prior to 21.3 **Description** The issue is related to insufficient input validation in the EAS Console component of Oracle Essbase Administration Services. This easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Essbase Administration Services, potentially leading to a takeover. Attacks may significantly impact additional products. **Recommendations** For versions prior to 11.1.2.4.046, update to version 11.1.2.4.046 or later. For versions prior to 21.3, update to version 21.3 or later. As a temporary workaround, consider restricting access to the EAS Console component until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Essbase Analytic Provider Services version 11.1.2.4 **Description** The issue is related to errors in processing input data in the JAPI component of Essbase Analytic Provider Services. This can allow a remote attacker to gain full access to critical data. The vulnerability can be easily exploited by an unauthenticated attacker with network access via HTTP, but successful attacks require human interaction from a person other than the attacker. This can result in unauthorized creation, deletion, or modification access to critical data or all accessible data, as well as unauthorized access to critical data. **Recommendations** For version 11.1.2.4, consider restricting access to the JAPI component until a patch is available. As a temporary workaround, disabling the JAPI component can help minimize the risk of exploitation. Additionally, restricting network access via HTTP to the Essbase Analytic Provider Services can also reduce the risk.

**Name of the Vulnerable Software and Affected Versions** Cisco SD-WAN vManage Software (affected versions not specified) **Description** The issue is related to insufficient neutralization of special elements in data requests in the web-based management interface of Cisco SD-WAN vManage Software. This could allow a remote attacker to conduct Cypher query language injection attacks on an affected system, potentially obtaining sensitive information. The vulnerability is due to insufficient input validation by the web-based management interface. An attacker could exploit this by sending crafted HTTP requests to the interface of an affected system. **Recommendations** For all affected versions, update to the latest software version that addresses this vulnerability, as released by Cisco. There are no workarounds that address this vulnerability. As a temporary measure, consider restricting access to the web-based management interface to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Cisco SD-WAN vManage Software (affected versions not specified) **Description** A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain read and write access to information stored on an affected system. This issue is due to improper handling of XML External Entity (XXE) entries when the affected software parses certain XML files. An attacker could exploit this vulnerability by persuading a user to import a crafted XML file with malicious entries, potentially allowing the attacker to read and write files within the affected application. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cisco SD-WAN vManage Software (affected versions not specified) **Description** A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to inject arbitrary commands on an affected system and cause a denial of service (DoS) condition. This is due to improper input validation of user-supplied input to the device template configuration. An attacker could exploit this by submitting crafted input to the device template configuration, potentially causing a DoS condition on the affected system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cisco SD-WAN vManage Software (affected versions not specified) **Description** The issue is related to errors in the authorization procedure of the Cisco SD-WAN vManage web interface. It allows a remote attacker to gain unauthorized access to protected information by sending specially crafted HTTP requests. This is due to insufficient authorization checks. An attacker could exploit this by sending crafted HTTP requests to the web-based management interface, potentially bypassing authorization checking and gaining access to sensitive information. **Recommendations** For Cisco SD-WAN vManage Software, update to a version that includes the software updates released by Cisco to address this issue. As a temporary workaround, consider restricting access to the web-based management interface to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Apache HTTP Server versions 2.4.0 through 2.4.46 **Description** The issue is caused by a stack overflow in the `mod auth digest` function of the Apache HTTP Server. This can be triggered by a specially crafted Digest nonce. Although there are no reports of this overflow being exploitable, certain compiler and/or compilation options might make it possible, with limited consequences due to the size and value of the overflow. **Recommendations** For Apache HTTP Server versions 2.4.0 through 2.4.46, consider updating to a version where this issue is fixed, as the current version may be vulnerable to a stack overflow in the `mod auth digest` function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.