Access and Security Vulnerability in Oracle Hyperion Data Relationship Management
CVE-2018-3208

7.7HIGH

Key Information:

Vendor
Oracle
Status
Hyperion Data Relationship Management
Vendor
CVE Published:
17 October 2018

Summary

A vulnerability exists in the Access and Security component of Oracle Hyperion Data Relationship Management, primarily affecting version 11.1.2.4.345. This flaw allows low-privileged attackers with network access via HTTP to potentially compromise the system. Exploiting this vulnerability may grant unauthorized access to critical data or even full control over all Hyperion Data Relationship Management accessible information, posing serious risks to data integrity and confidentiality.

Affected Version(s)

Hyperion Data Relationship Management 11.1.2.4.345

References

http://www.securityfocus.com/bid/105639
vdb-entryx_refsource_BID
http://www.oracle.com/technetwork/security-advisory/cpuoc...
x_refsource_CONFIRM
http://www.securitytracker.com/id/1041898
vdb-entryx_refsource_SECTRACK

CVSS V3.1

Score:
7.7
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.