PT-2013-4642 · Oracle · Oracle Hyperion

Published 2013-07-17 · Updated 2019-06-11 · CVE-2013-3803

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Oracle Hyperion versions 11.1.1.3 through 11.1.1.4.107 Oracle Hyperion versions 11.1.2.1 through 11.1.2.1.129 Oracle Hyperion versions 11.1.2.2 through 11.1.2.2.305

Description The issue affects confidentiality and is related to the Intelligence Service in the Hyperion BI+ component. It can be exploited by remote authenticated users via unknown vectors.

Recommendations For Oracle Hyperion versions 11.1.1.3 through 11.1.1.4.107, update to a version later than 11.1.1.4.107. For Oracle Hyperion versions 11.1.2.1 through 11.1.2.1.129, update to a version later than 11.1.2.1.129. For Oracle Hyperion versions 11.1.2.2 through 11.1.2.2.305, update to a version later than 11.1.2.2.305.

Exploit

Fix

Related Identifiers

CVE-2013-3803

Affected Products

Oracle Hyperion

References · 8

• 🔥 https://exploit-db.com/exploits/27291 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-3803 · Security Note
• http://oracle.com/technetwork/topics/security/cpujuly2013-1899826.html · Vendor Advisory
• http://secunia.com/advisories/54220 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/85664 · Note
• http://securityfocus.com/bid/61204 · Note
• http://securitytracker.com/id/1028794 · Note
• http://osvdb.org/95277 · Note