Public exploit available

Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2013-3803

4 documents4 sources

Severity

3.5LOW

EPSS

20.4%

top 4.46%

CISA KEV

Not in KEV

Exploit

PoC available

Public exploit / PoC exists

Affected products

Oracle Hyperion

Timeline

PublishedJul 17

Latest updateMay 14

Description

Unspecified vulnerability in the Hyperion BI+ component in Oracle Hyperion 11.1.1.3, 11.1.1.4.107 and earlier, 11.1.2.1.129 and earlier, and 11.1.2.2.305 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related to Intelligence Service.

CVSS vector

AV:N/AC:M/C:P/I:N/A:NExploitability: 6.8 | Impact: 2.9

Affected Packages1 packages

▶NVDoracle/hyperion11.1.1.4 — 11.1.1.4.107+3

🔴Vulnerability Details

GHSA

GHSA-9f4h-pj6m-jj35: Unspecified vulnerability in the Hyperion BI+ component in Oracle Hyperion 11↗2022-05-14

▶

CVEList

CVE-2013-3803: Unspecified vulnerability in the Hyperion BI+ component in Oracle Hyperion 11↗2013-07-17

▶

💥Exploits & PoCs

Exploit-DB

Oracle Hyperion 11 - Directory Traversal↗2013-08-02

▶