{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3aoraclemysql_server/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*","cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*","cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*","cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*","cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*","cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*","cpe:2.3:a:oracle:complex_maintenance_repair_and_overhaul:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":4.4,"id":"CVE-2024-21008"},{"cvss":6.1,"id":"CVE-2024-21035"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Hyperion"],"_cs_severities":["low"],"_cs_tags":["vulnerability","enterprise-software","patch-management"],"_cs_type":"advisory","_cs_vendors":["Oracle"],"content_html":"\u003cp\u003eOracle has released a security advisory detailing 25 distinct vulnerabilities affecting the Oracle Hyperion software suite. These vulnerabilities are exploitable by remote, anonymous, or authenticated attackers, presenting a significant risk to the confidentiality, integrity, and availability of the affected infrastructure. The identified CVEs include CVE-2024-21008 through CVE-2024-21035. Given the range of exploitability - from anonymous unauthenticated access to authenticated scenarios - organizations running Hyperion are advised to prioritize patching efforts. Because the source advisory acts as a security disclosure and lacks specific exploitation telemetry or PoC details, defenders should focus on inventory management and verifying that all instances are updated to the latest vendor-supplied patch levels to mitigate these vulnerabilities.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation of these vulnerabilities can lead to full system compromise, allowing attackers to access sensitive data, modify system configurations, or cause service disruptions. The scope of impact is broad, potentially affecting any enterprise organization relying on Oracle Hyperion for financial management and business intelligence applications.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReview the Oracle Critical Patch Update documentation for the specific patch levels addressing CVE-2024-21008 through CVE-2024-21035.\u003c/li\u003e\n\u003cli\u003eAudit all internet-facing instances of Oracle Hyperion to ensure they are isolated from unauthorized external access until patches are applied.\u003c/li\u003e\n\u003cli\u003eUpdate Oracle Hyperion instances to the latest version immediately to mitigate these vulnerabilities.\u003c/li\u003e\n\u003cli\u003eMonitor enterprise vulnerability management consoles for any systems still reporting outdated Oracle Hyperion versions.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-08-19T08:11:00Z","date_published":"2026-08-19T08:11:00Z","id":"https://feed.craftedsignal.io/briefs/2026-08-oracle-hyperion-vulnerabilities/","summary":"Oracle has disclosed a series of 25 vulnerabilities affecting Hyperion, enabling remote, anonymous, or authenticated attackers to compromise system confidentiality, integrity, and availability.","title":"Multiple Vulnerabilities in Oracle Hyperion","url":"https://feed.craftedsignal.io/briefs/2026-08-oracle-hyperion-vulnerabilities/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}