Oracle Hyperion BI+ 11.2.18.0.000 UI/Visualization: Low-Priv ACL Read (AV:A)
CVE-2024-21257 Published on October 15, 2024

Vulnerability in the Oracle Hyperion BI+ product of Oracle Hyperion (component: UI and Visualization). The supported version that is affected is 11.2.18.0.000. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion BI+ executes to compromise Oracle Hyperion BI+. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Hyperion BI+ accessible data. CVSS 3.1 Base Score 3.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N).

Vendor Advisory NVD

Vulnerability Analysis

Attack Vector:
ADJACENT_NETWORK
Attack Complexity:
LOW
Privileges Required:
LOW
User Interaction:
REQUIRED
Scope:
UNCHANGED
Confidentiality Impact:
LOW
Integrity Impact:
NONE
Availability Impact:
NONE

Products Associated with CVE-2024-21257

stack.watch emails you whenever new vulnerabilities are published in Oracle or Oracle Hyperion Bi. Just hit a watch button to start following.

Oracle
 
Oracle Hyperion Bi
 

Affected Versions

Oracle Corporation Oracle Hyperion BI+ Version 11.2.18.0.000 is affected by CVE-2024-21257

Exploit Probability

EPSS
0.27%
Percentile
50.53%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.