CVE-2020-2769 - Vulnerability in the Hyperion Financial Reporting product of Oracle Hyperion (component: Web Based Report Designer)

Back Back to CVE browser

LOW

Vulnerability in the Hyperion Financial Reporting product of Oracle Hyperion (component: Web Based Report Designer)

Published Apr 15, 2020

2.4

LOW

CVSS 3.1

EPSS 0.89%

Description

Vulnerability in the Hyperion Financial Reporting product of Oracle Hyperion (component: Web Based Report Designer). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Financial Reporting. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Hyperion Financial Reporting accessible data. CVSS 3.0 Base Score 2.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N).

Affected products

Vendor Oracle Corporation Product Hyperion Financial Reporting Default
n/a
- Version
  11.1.2.4
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Oracle Corporation

Hyperion Financial Reporting

n/a

Version	Status	Constraints
11.1.2.4	affected	-

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-22562
Advisory
https://www.oracle.com/security-alerts/cpuapr2020.html
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-22562		Advisory
https://www.oracle.com/security-alerts/cpuapr2020.html		x_refsource_MISCVendor Advisory