CVE-2022-44729 in Hyperion Financial Reporting

Summary

Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache XML Graphics Batik.This issue affects Apache XML Graphics Batik: 1.16. On version 1.16, a malicious SVG could trigger loading external resources by default, causing resource consumption or in some cases even information disclosure. Users are recommended to upgrade to version 1.17 or later.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservation

11/04/2022

Disclosure

08/22/2023

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
251226	Oracle Hyperion Financial Reporting Installation server-side request forgery	918	Not defined	Official fix	CVE-2022-44729
251207	Oracle Business Intelligence Enterprise Edition Presentation Services server-side request forgery	918	Not defined	Official fix	CVE-2022-44729
251181	Oracle Business Process Management Suite BPM Composer server-side request forgery	918	Not defined	Official fix	CVE-2022-44729
251137	Oracle Financial Services Revenue Management and Billing Infrastructure server-side request forgery	918	Not defined	Official fix	CVE-2022-44729
242712	Oracle WebLogic Server Centralized Thirdparty Jars server-side request forgery	918	Not defined	Official fix	CVE-2022-44729
242711	Oracle Middleware Common Libraries and Tools Third Party server-side request forgery	918	Not defined	Official fix	CVE-2022-44729
242440	Oracle Database Spatial/Graph server-side request forgery	918	Not defined	Official fix	CVE-2022-44729
237672	Apache Batik server-side request forgery	918	Not defined	Official fix	CVE-2022-44729

Sources

• MITRE
• NVD
• CVE Details