CVE-2018-3142: High severity oracle hyperion infrastructure technology vulnerability

Published Oct 17, 2018

Updated

Vulnerability in the Hyperion Essbase Administration Services component of Oracle Hyperion (subcomponent: EAS Console). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Hyperion Essbase Administration Services. While the vulnerability is in Hyperion Essbase Administration Services, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Hyperion Essbase Administration Services accessible data. CVSS 3.0 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).

Affected Software

1 affected component

Oracle Hyperion=11.1.2.4

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html

Event History

Oct 17, 2018

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2018-3142?

CVE-2018-3142 is a vulnerability in the Hyperion Essbase Administration Services component of Oracle Hyperion.

What is the affected software for CVE-2018-3142?

The affected software for CVE-2018-3142 is Oracle Hyperion version 11.1.2.4.

How severe is CVE-2018-3142?

CVE-2018-3142 has a severity rating of 7.7 (high).

How can CVE-2018-3142 be exploited?

CVE-2018-3142 can be exploited by a low privileged attacker with network access via HTTP.

Where can I find more information about CVE-2018-3142?

More information about CVE-2018-3142 can be found at the following references: [1] [2] [3].