PT-2020-4484
CVE-2020-14767
·
تاريخ النشر
2020-10-21
·
تاريخ التحديث
2020-10-23
الوصف من
CVSS 2.0
4.9
متوسطةالمقاييسAV:N/AC:H/Au:S/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Oracle Hyperion BI+ version 11.1.2.4
Description
The issue is related to insufficient input validation in the IQR-Foundation service component of Oracle Hyperion BI+. It allows a high-privileged attacker with network access via multiple protocols, including HTTP, to compromise Hyperion BI+. Successful attacks require human interaction from a person other than the attacker and can result in unauthorized access to critical data or complete access to all Hyperion BI+ accessible data.
Recommendations
For version 11.1.2.4, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾