Not rated
CVE-2018-2907 Vulnerability in the Hyperion Financial Reporting component of Oracle Hyperion (subcomponent: Security Models)
Description
Vulnerability in the Hyperion Financial Reporting component of Oracle Hyperion (subcomponent: Security Models). The supported version that is affected is 11.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion Financial Reporting. While the vulnerability is in Hyperion Financial Reporting, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Hyperion Financial Reporting accessible data. CVSS 3.0 Base Score 8.6 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Hyperion Financial Reporting | 11.1.2 | No fix stated |
Other CVEs of Hyperion Financial Reporting
The 7 CVEs of Hyperion Financial Reporting →
CVE-2023-22062
Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Repository)
8.5
High
CVE-2021-35665
Vulnerability in the Hyperion Financial Reporting product of Oracle Hyperion (component: Repository)
6.1
Medium
CVE-2020-2769
Vulnerability in the Hyperion Financial Reporting product of Oracle Hyperion (component: Web Based Report Designer)
2.4
Low
CVE-2019-2959
Vulnerability in the Hyperion Financial Reporting product of Oracle Hyperion (component: Security Models)
Not rated