Unauthenticated Access Vulnerability in Hyperion Common Events by Oracle

CVE-2018-3175

Summary

The Hyperion Common Events component of Oracle Hyperion has a vulnerability that could be exploited by an unauthenticated attacker having network access via HTTP. While the vulnerability primarily exists in the Hyperion Common Events, exploitation can lead to unauthorized update, insert, or delete actions on accessible data, as well as unauthorized reading of a subset of this data. Successful exploitation necessitates human interaction from a non-attacker party, thereby increasing the complexity of exploitation. The potential impact on additional interconnected products raises concerns regarding broader data integrity and confidentiality.

References