CVE-2018-2915: Medium severity oracle hyperion data relationship management vulnerability

Published Jul 18, 2018

Updated

Vulnerability in the Hyperion Data Relationship Management component of Oracle Hyperion (subcomponent: Access and security). The supported version that is affected is 11.1.2.4.330. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Hyperion Data Relationship Management. While the vulnerability is in Hyperion Data Relationship Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Hyperion Data Relationship Management accessible data. CVSS 3.0 Base Score 5.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N).

Affected Software

1 affected component

Oracle Hyperion Data Relationship Management=11.1.2.4.330

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html

Event History

Jul 18, 2018

CVE Published

via MITRE·01:00 PM

Data Sourced

via MITRE·01:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?

The vulnerability ID is CVE-2018-2915.

What component of Oracle Hyperion is affected by this vulnerability?

The Hyperion Data Relationship Management component of Oracle Hyperion is affected.

What version of Oracle Hyperion is affected by this vulnerability?

The version 11.1.2.4.330 of Oracle Hyperion is affected.

How severe is this vulnerability?

The severity of this vulnerability is medium, with a severity value of 5.8.

How can an attacker exploit this vulnerability?

An unauthenticated attacker with network access via HTTPS can exploit this vulnerability to compromise Hyperion Data Relationship Management.