CVE-2020-2769: Low severity oracle hyperion financial reporting vulnerability

Published Apr 15, 2020

Updated

Vulnerability in the Hyperion Financial Reporting product of Oracle Hyperion (component: Web Based Report Designer). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Financial Reporting. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Hyperion Financial Reporting accessible data. CVSS 3.0 Base Score 2.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N).

Affected Software

1 affected component

ORACLE Hyperion Financial Reporting=11.1.2.4

Event History

Apr 15, 2020

CVE Published

via MITRE·01:29 PM

Data Sourced

via MITRE·01:29 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID for this Oracle Hyperion Financial Reporting vulnerability?

The vulnerability ID for this Oracle Hyperion Financial Reporting vulnerability is CVE-2020-2769.

What is the affected software version for this vulnerability?

The affected software version for this vulnerability is Oracle Hyperion Financial Reporting 11.1.2.4.

How can the vulnerability in Oracle Hyperion Financial Reporting be exploited?

The vulnerability in Oracle Hyperion Financial Reporting can be exploited by a high privileged attacker with network access via HTTP.

What is the severity of CVE-2020-2769?

The severity of CVE-2020-2769 is low (2.4 on a scale of 10).

Where can I find more information about this vulnerability?

You can find more information about this vulnerability on Oracle's security alerts page: https://www.oracle.com/security-alerts/cpuapr2020.html