ID CVE-2018-2594
Summary Vulnerability in the Hyperion BI+ component of Oracle Hyperion (subcomponent: Foundation UI & Servlets). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion BI+. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Hyperion BI+ accessible data as well as unauthorized read access to a subset of Hyperion BI+ accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Hyperion BI+. CVSS 3.0 Base Score 4.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L).
References
Vulnerable Configurations
  • cpe:2.3:a:oracle:hyperion_bi%2b:11.1.2.4
    cpe:2.3:a:oracle:hyperion_bi%2b:11.1.2.4
CVSS
Base: 6.0
Impact:
Exploitability:
nessus via4
NASL family Web Servers
NASL id SUN_JAVA_WEB_SERVER_7_0_27.NASL
description According to its self-reported version, the Oracle iPlanet Web Server (formerly known as Sun Java System Web Server) running on the remote host is 7.0.x prior to 7.0.27 Patch 26834070. It is, therefore, affected by an unspecified vulnerability in the Network Security Services (NSS) library with unknown impact.
last seen 2019-02-21
modified 2018-08-03
plugin id 106349
published 2018-01-25
reporter Tenable
source https://www.tenable.com/plugins/index.php?view=single&id=106349
title Oracle iPlanet Web Server 7.0.x < 7.0.27 NSS Unspecified Vulnerability (January 2018 CPU)
refmap via4
bid 102641
confirm http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
sectrack 1040206
Last major update 17-01-2018 - 21:29
Published 17-01-2018 - 21:29
Last modified 02-10-2019 - 20:03
Back to Top