Oracle Hyperion Bi+ vulnerabilities

12 CVEs affecting Oracle Hyperion Bi+, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-21257, published 2024-10-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-45105, published 2021-12-18. Medium severity, CVSS 5.9. EPSS: 100% chance of exploitation in the next 30 days. Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over…
CVE-2017-10312, published 2017-10-19. High severity, CVSS 7.1. EPSS: 1.9% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hyperion BI+ component of Oracle Hyperion (subcomponent: UI and Visualization). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows…
CVE-2017-10359, published 2017-10-19. Medium severity, CVSS 5.4. EPSS: 1.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hyperion BI+ component of Oracle Hyperion (subcomponent: UI and Visualization). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows…
CVE-2018-3184, published 2018-10-17. Low severity, CVSS 2.4. EPSS: 1.3% chance of exploitation in the next 30 days. Vulnerability in the Hyperion BI+ component of Oracle Hyperion (subcomponent: IQR - Foundation Services). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows…
CVE-2021-2439, published 2021-07-21. Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hyperion BI+ product of Oracle Hyperion (component: UI and Visualization). Supported versions that are affected are 11.1.2.4 and 11.2.5.0. Easily exploitable vulnerability…
CVE-2020-14767, published 2020-10-21. Medium severity, CVSS 4.2. EPSS: 1% chance of exploitation in the next 30 days. Vulnerability in the Hyperion BI+ product of Oracle Hyperion (component: IQR-Foundation service). The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high…
CVE-2020-14560, published 2020-07-15. Medium severity, CVSS 4.2. EPSS: 1% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hyperion BI+ product of Oracle Hyperion (component: UI and Visualization). The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows…
CVE-2020-14770, published 2020-10-21. Low severity, CVSS 2.0. EPSS: 0.8% chance of exploitation in the next 30 days. Vulnerability in the Hyperion BI+ product of Oracle Hyperion (component: IQR-Foundation service). The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high…
CVE-2018-2595, published 2018-01-18. Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days. Vulnerability in the Hyperion BI+ component of Oracle Hyperion (subcomponent: Foundation UI & Servlets). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows…
CVE-2018-2594, published 2018-01-18. Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days. Vulnerability in the Hyperion BI+ component of Oracle Hyperion (subcomponent: Foundation UI & Servlets). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows…

Latest

CVE-2024-21257, published 2024-10-15. Low severity, CVSS 3.0. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Hyperion BI+ product of Oracle Hyperion (component: UI and Visualization). The supported version that is affected is 11.2.18.0.000. Easily exploitable vulnerability…
CVE-2019-2415, published 2019-01-16. Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days. Vulnerability in the Hyperion BI+ component of Oracle Hyperion (subcomponent: Foundation UI & Servlets). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows…