CVE-2018-2733 — Corporation Hyperion Planning vulnerability

4 documents4 sources

Severity

7.6HIGHNVD

EPSS

2.1%

top 15.75%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Oracle Corporation Hyperion Planning Oracle Hyperion Planning

Timeline

PublishedJan 18

Latest updateMay 13

Description

Vulnerability in the Oracle Hyperion Planning component of Oracle Hyperion (subcomponent: Security). The supported version that is affected is 11.1.2.4.007. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Planning. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Hyperion Planning, attacks may significantly impact additional products. Successful…

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:HExploitability: 1.0 | Impact: 6.0

Affected Packages2 packages

▶NVDoracle/hyperion_planning11.1.2.4.007

▶CVEListV5oracle_corporation/hyperion_planning11.1.2.4.007

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

GHSA

GHSA-j7cx-rj84-q7wg: Vulnerability in the Oracle Hyperion Planning component of Oracle Hyperion (subcomponent: Security)↗2022-05-13

▶

CVEList

CVE-2018-2733: Vulnerability in the Oracle Hyperion Planning component of Oracle Hyperion (subcomponent: Security)↗2018-01-18

▶

💬Community

Bugzilla

CVE-2018-14643 rubygem-smart_proxy_dynflow: Authentication bypass in Foreman remote execution feature [rhn_satellite_6.3]↗2018-09-14

▶