Oracle Hyperion Interactive Reporting vulnerabilities

2 CVEs affecting Oracle Hyperion Interactive Reporting, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-3830, published 2014-01-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-3830, published 2014-01-15. High severity, CVSS 7.1. EPSS: 2.5% chance of exploitation in the next 30 days. Unspecified vulnerability in the Hyperion Strategic Finance component in Oracle Hyperion 11.1.2.1 and 11.1.2.2 allows remote authenticated users to affect confidentiality, integrity, and availability…
CVE-2012-3133, published 2012-12-21. Medium severity, CVSS 6.8. EPSS: 1.1% chance of exploitation in the next 30 days. Buffer overflow in the DataDirect ODBC driver, as used in Oracle Hyperion Interactive Reporting 11.1.2.1 and 11.1.2.2, Essbase Server 11.1.2.1 and 11.1.2.2, Production Reporting Server 11.1.2.1 and…