Vulnerability in Oracle Hyperion Financial Close Management Product
CVE-2020-2563
4.2MEDIUM
Key Information:
- Vendor
- Oracle
- Vendor
- CVE Published:
- 15 January 2020
Summary
A vulnerability exists in the Hyperion Financial Close Management product, allowing a high-privileged attacker with network access via HTTP to potentially compromise the application. Exploitation of this weakness requires user interaction from an individual other than the attacker, making it difficult to exploit. Successful attacks may lead to unauthorized creation, deletion, or modification of important data, posing significant risks to the integrity of information managed by the system. For more on this issue, visit the Oracle security alert at Oracle Security Alerts.
Affected Version(s)
Hyperion Financial Close Management 11.1.2.4
References
CVSS V3.1
Score:
4.2
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved