PT-2020-3878

CVE-2020-14546

·

Published

2020-07-15

·

Updated

2020-07-16

Description by

CVSS 2.0
4.9
Medium
MetricsAV:N/AC:H/Au:S/C:N/I:C/A:N
Name of the Vulnerable Software and Affected Versions: Oracle Hyperion Financial Close Management version 11.1.2.4
Description: The issue exists due to insufficient input validation in the Close Manager component of Oracle Hyperion Financial Close Management. Exploitation of this issue may allow a remote attacker to modify, add, or delete data. The vulnerability is difficult to exploit and requires high privileges, as well as human interaction from someone other than the attacker. Successful attacks can result in unauthorized access to critical data or all accessible data within Hyperion Financial Close Management.
Recommendations: For version 11.1.2.4, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾