CVE:CVE-2021-2244
CNNVD:CNNVD-202104-1426
Oracle Hyperion是美国甲骨文（Oracle）公司的一套财务建模应用软件。该软件提供财务结算、报表制作等功能。
Hyperion Analytic Provider Services JAPI 11.1.2.4, 12.2.1.4 存在输入验证错误漏洞，该漏洞允许未经身份验证的攻击者通过HTTP进行网络访问，从而危及Hyperion分析提供商服务。
solution:Upgrade oracle essbase_analytic_provider_services to a higher version than 21.2,and avoid the version 21.2; Upgrade oracle hyperion_analytic_provider_services to a higher version than 11.1.2.4,12.2.1.4,and avoid the version 11.1.2.4,12.2.1.4