Oracle Hyperion Vulnerabilidad

Cronología

El año pasado

Versión

11.1.2.456
11.1.2.217
11.1.2.316
11.2.14.0.00013
11.2.6.06

Contramedidas

Official Fix121
Temporary Fix0
Workaround0
Unavailable0
Not Defined6

Explotabilidad

High1
Functional0
Proof-of-Concept2
Unproven7
Not Defined117

Vector de acceso

Not Defined0
Physical0
Local11
Adjacent1
Network115

Autenticación

Not Defined0
High35
Low22
None70

La interacción del usuario

Not Defined0
Required51
None76

C3BM Index

El año pasado

CVSSv3 Base

≤10
≤22
≤35
≤42
≤526
≤624
≤723
≤819
≤96
≤1020

CVSSv3 Temp

≤10
≤22
≤35
≤413
≤520
≤630
≤714
≤817
≤96
≤1020

VulDB

≤10
≤22
≤35
≤42
≤526
≤624
≤723
≤819
≤96
≤1020

NVD

≤10
≤21
≤34
≤41
≤513
≤610
≤719
≤811
≤93
≤1016

CNA

≤10
≤20
≤30
≤40
≤51
≤62
≤71
≤85
≤92
≤101

Proveedor

≤10
≤21
≤34
≤41
≤510
≤64
≤78
≤85
≤92
≤101

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k0
<2k0
<5k11
<10k27
<25k61
<50k9
<100k17
≥100k2

Explotar hoy

<1k86
<2k7
<5k12
<10k5
<25k14
<50k3
<100k0
≥100k0

Explotar el volumen del mercado

El año pasado

🔴 CTI Ocupaciones

Affected Versions (27): 11.1.1, 11.1.1.1, 11.1.1.2, 11.1.1.3, 11.1.1.4.107, 11.1.2, 11.1.2.1, 11.1.2.1.104, 11.1.2.1.129, 11.1.2.2, 11.1.2.2.305, 11.1.2.3, 11.1.2.4, 11.1.2.4.007, 11.1.2.4.33, 11.1.2.4.345, 11.2.1, 11.2.5, 11.2.6, 11.2.7, 11.2.9, 11.2.12, 11.2.13, 11.2.14, 12.2.1.4, 21.2, 21.4.3

Link to Product Website: https://www.oracle.com

Fecha de publicaciónBaseTempVulnerabilidad0dayHoyExpConCTICVE
2024-01-164.84.7Oracle Hyperion Planning Security escalada de privilegios$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2021-29425
2024-01-167.16.9Oracle Hyperion Financial Reporting Installation escalada de privilegios$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2022-44729
2024-01-167.37.1Oracle Hyperion Planning Security escalada de privilegios$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2019-10086
2024-01-167.37.1Oracle Hyperion Calculation Manager Security escalada de privilegios$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2019-10086
2024-01-167.57.3Oracle Hyperion Planning Security denegación de servicio$5k-$25k$0-$5kNot DefinedOfficial Fix0.09CVE-2023-5072
2024-01-167.57.3Oracle Hyperion Infrastructure Technology Installation/Configuration denegación de servicio$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-5072
2024-01-167.57.3Oracle Hyperion Financial Data Quality Management Security denegación de servicio$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-5072
2024-01-167.57.3Oracle Hyperion Calculation Manager Security denegación de servicio$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-5072
2024-01-169.89.6Oracle Hyperion Planning Hub escalada de privilegios$25k-$100k$25k-$100kNot DefinedOfficial Fix0.02CVE-2021-42575
2024-01-169.89.6Oracle Hyperion Infrastructure Technology Installation/Configuration escalada de privilegios$25k-$100k$5k-$25kNot DefinedOfficial Fix0.02CVE-2023-50164
2024-01-169.89.6Oracle Hyperion Financial Management Security desbordamiento de búfer$25k-$100k$5k-$25kNot DefinedOfficial Fix0.02CVE-2022-37434
2023-10-178.88.6Oracle Hyperion Infrastructure Technology directory traversal$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-27534
2023-10-179.89.6Oracle Hyperion Infrastructure Technology Installation/Configuration escalada de privilegios$25k-$100k$25k-$100kNot DefinedOfficial Fix0.02CVE-2023-25690
2023-07-187.67.4Oracle Hyperion Workspace UI/Visualization Privilege Escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-22060
2023-07-188.58.3Oracle Hyperion Financial Reporting Repository vulnerabilidad desconocida$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-22062
2023-07-189.89.6Oracle Hyperion Data Relationship Management Web Client - Unicode Remote Code Execution$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2021-24112
2023-07-186.05.8Oracle Hyperion Essbase Administration Services EAS Administration/EAS Console divulgación de información$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-21961
2023-04-185.55.4Oracle Hyperion Infrastructure Technology Installation/Configuration denegación de servicio$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2021-36374
2023-04-189.89.6Oracle Hyperion Financial Reporting Installation desbordamiento de búfer$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2022-27404
2023-01-179.89.6Oracle Hyperion Infrastructure Technology Installation/Configuration Remote Code Execution$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2021-31805
2023-01-179.89.6Oracle Hyperion Infrastructure Technology Installation/Configuration escalada de privilegios$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2022-42889
2022-10-199.89.6Oracle Hyperion Infrastructure Technology Installation/Configuration Remote Code Execution$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2022-33980
2022-04-195.35.2Oracle Hyperion Data Relationship Management Web Client denegación de servicio$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-7760
2022-04-195.55.4Oracle Hyperion Infrastructure Technology Installation/Configuration denegación de servicio$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-31812
2022-04-196.56.3Oracle Hyperion Calculation Manager General divulgación de información$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-6950

102 no se muestran más entradas

más entradas por Oracle

Do you know our Splunk app?

Download it now for free!