CVE Feed

    Dashboard / CVE / CVE-2023-22062

    CVE-2023-22062

    Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Repository). The supported version that is affected is 11.2.13.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Reporting. While the vulnerability is in Oracle Hyperion Financial Reporting, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Reporting accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hyperion Financial Reporting. CVSS 3.1 Base Score 8.5 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L).

    Published:Jul 18, 2023
    Last Modified:Nov 21, 2024
    EPS:Jul 18, 2023
    EPSS Score:0.00196
    CVSS Score:8.5

    Affected Products

    Vendor
    Oracle
    Product
    Hyperion

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2018-3141 (CVSS 5.8) — Vulnerability in the Hyperion Essbase Administration Services component of Oracle Hyperion (subcomponent: EAS …
    CVE-2018-3140 (CVSS 6.1) — Vulnerability in the Hyperion Essbase Administration Services component of Oracle Hyperion (subcomponent: EAS …
    CVE-2018-3142 (CVSS 7.7) — Vulnerability in the Hyperion Essbase Administration Services component of Oracle Hyperion (subcomponent: EAS …
    CVE-2015-4823 (CVSS 1.2) — Unspecified vulnerability in the Hyperion Installation Technology component in Oracle Hyperion 11.1.2.3 allows…
    CVE-2015-2584 (CVSS 4) — Unspecified vulnerability in the Hyperion Enterprise Performance Management Architect component in Oracle Hype…
    CVE-2015-2592 (CVSS 3.5) — Unspecified vulnerability in the Hyperion Enterprise Performance Management Architect component in Oracle Hype…
    CVE-2015-4773 (CVSS 4) — Unspecified vulnerability in the Hyperion Common Security component in Oracle Hyperion 11.1.2.2, 11.1.2.3, and…
    CVE-2015-0509 (CVSS 4.3) — Unspecified vulnerability in the Oracle Hyperion BI+ component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows…
    CVE-2014-3707 (CVSS 4.3) — The curl_easy_duphandle function in libcurl 7.17.1 through 7.38.0, when running with the CURLOPT_COPYPOSTFIELD…
    CVE-2014-4271 (CVSS 5) — Unspecified vulnerability in the Hyperion Essbase component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows re…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High