oracle hyperion-financial-reporting CVE-2018-2907 is a vulnerability in Oracle Hyperion Financial Reporting
Published on July 18, 2018

Vulnerability in the Hyperion Financial Reporting component of Oracle Hyperion (subcomponent: Security Models). The supported version that is affected is 11.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion Financial Reporting. While the vulnerability is in Hyperion Financial Reporting, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Hyperion Financial Reporting accessible data. CVSS 3.0 Base Score 8.6 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).

NVD


Products Associated with CVE-2018-2907

Want to know whenever a new CVE is published for Oracle Hyperion Financial Reporting? stack.watch will email you.

Oracle Hyperion Financial Reporting
 

Affected Versions

Oracle Corporation Hyperion Financial Reporting Version 11.1.2 is affected by CVE-2018-2907

Exploit Probability

EPSS
1.74%
Percentile
82.29%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.