Oracle Hyperion vulnerabilities

23 CVEs affecting Oracle Hyperion, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-22062, published 2023-07-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-3803, published 2013-07-17. Low severity, CVSS 3.5. EPSS: 6.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Hyperion BI+ component in Oracle Hyperion 11.1.1.3, 11.1.1.4.107 and earlier, 11.1.2.1.129 and earlier, and 11.1.2.2.305 and earlier allows remote authenticated users…
CVE-2014-3707, published 2014-11-15. Medium severity, CVSS 4.3. EPSS: 5.1% chance of exploitation in the next 30 days. The curl_easy_duphandle function in libcurl 7.17.1 through 7.38.0, when running with the CURLOPT_COPYPOSTFIELDS option, does not properly copy HTTP POST data for an easy handle, which triggers an…
CVE-2014-4271, published 2014-07-17. Medium severity, CVSS 5.0. EPSS: 2.9% chance of exploitation in the next 30 days. Unspecified vulnerability in the Hyperion Essbase component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect availability via unknown vectors related to Agent.
CVE-2018-3142, published 2018-10-17. High severity, CVSS 7.7. EPSS: 2% chance of exploitation in the next 30 days. Vulnerability in the Hyperion Essbase Administration Services component of Oracle Hyperion (subcomponent: EAS Console). The supported version that is affected is 11.1.2.4. Easily exploitable…
CVE-2018-3141, published 2018-10-17. Medium severity, CVSS 5.8. EPSS: 2% chance of exploitation in the next 30 days. Vulnerability in the Hyperion Essbase Administration Services component of Oracle Hyperion (subcomponent: EAS Console). The supported version that is affected is 11.1.2.4. Easily exploitable…
CVE-2014-4270, published 2014-07-17. Medium severity, CVSS 4.0. EPSS: 1.9% chance of exploitation in the next 30 days. Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote authenticated users to affect confidentiality via unknown vectors related to…
CVE-2014-4269, published 2014-07-17. Medium severity, CVSS 4.0. EPSS: 1.9% chance of exploitation in the next 30 days. Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote authenticated users to affect confidentiality via unknown vectors related to…
CVE-2014-4246, published 2014-07-17. Low severity, CVSS 3.5. EPSS: 1.7% chance of exploitation in the next 30 days. Unspecified vulnerability in the Hyperion Analytic Provider Services component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote authenticated users to affect confidentiality via vectors related…
CVE-2018-3140, published 2018-10-17. Medium severity, CVSS 6.1. EPSS: 1.5% chance of exploitation in the next 30 days. Vulnerability in the Hyperion Essbase Administration Services component of Oracle Hyperion (subcomponent: EAS Console). The supported version that is affected is 11.1.2.4. Easily exploitable…
CVE-2015-0509, published 2015-04-16. Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Hyperion BI+ component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect integrity via unknown vectors related to Reporting and…

Latest

CVE-2023-22062, published 2023-07-18. High severity, CVSS 8.5. EPSS: 0.6% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Repository). The supported version that is affected is 11.2.13.0.000. Easily exploitable…
CVE-2015-4823, published 2015-10-21. Low severity, CVSS 1.2. EPSS: 0.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Hyperion Installation Technology component in Oracle Hyperion 11.1.2.3 allows local users to affect confidentiality via unknown vectors related to Essbase Rapid…
CVE-2015-4773, published 2015-07-16. Medium severity, CVSS 4.0. EPSS: 1.5% chance of exploitation in the next 30 days. Unspecified vulnerability in the Hyperion Common Security component in Oracle Hyperion 11.1.2.2, 11.1.2.3, and 11.1.2.4 allows remote authenticated users to affect availability via unknown vectors…
CVE-2015-2592, published 2015-07-16. Low severity, CVSS 3.5. EPSS: 1.2% chance of exploitation in the next 30 days. Unspecified vulnerability in the Hyperion Enterprise Performance Management Architect component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote authenticated users to affect integrity via…
CVE-2015-2584, published 2015-07-16. Medium severity, CVSS 4.0. EPSS: 1.3% chance of exploitation in the next 30 days. Unspecified vulnerability in the Hyperion Enterprise Performance Management Architect component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote authenticated users to affect integrity via…