First published: Wed Apr 15 2020(Updated: )
Vulnerability in the Hyperion Financial Reporting product of Oracle Hyperion (component: Web Based Report Designer). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Financial Reporting. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Hyperion Financial Reporting accessible data. CVSS 3.0 Base Score 2.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N).
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
Oracle Hyperion Financial Reporting | =11.1.2.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this Oracle Hyperion Financial Reporting vulnerability is CVE-2020-2769.
The affected software version for this vulnerability is Oracle Hyperion Financial Reporting 11.1.2.4.
The vulnerability in Oracle Hyperion Financial Reporting can be exploited by a high privileged attacker with network access via HTTP.
The severity of CVE-2020-2769 is low (2.4 on a scale of 10).
You can find more information about this vulnerability on Oracle's security alerts page: https://www.oracle.com/security-alerts/cpuapr2020.html