CVE-2015-4773

Unspecified vulnerability in the Hyperion Common Security component in Oracle Hyperion 11.1.2.2, 11.1.2.3, and 11.1.2.4 allows remote authenticated users to affect availability via unknown vectors related to User Account Update.

CVSS v2.0 4.0 MEDIUM

4.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:N/I:N/A:P

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html	Patch Vendor Advisory
http://www.securitytracker.com/id/1032924
http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html	Patch Vendor Advisory
http://www.securitytracker.com/id/1032924

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:oracle:hyperion:11.1.2.2:::::::*
	cpe:2.3:a:oracle:hyperion:11.1.2.3:::::::*
	cpe:2.3:a:oracle:hyperion:11.1.2.4:::::::*

History

21 Nov 2024, 02:31

Type	Values Removed	Values Added
References	~~() http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - Patch, Vendor Advisory~~	() http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - Patch, Vendor Advisory
References	~~() http://www.securitytracker.com/id/1032924 -~~	() http://www.securitytracker.com/id/1032924 -

Information

Published : 2015-07-16 11:01

Updated : 2024-11-21 02:31

NVD link : CVE-2015-4773

Mitre link : CVE-2015-4773

CVE.ORG link : CVE-2015-4773

JSON object : View

Products Affected

oracle

hyperion

CWE

NVD-CWE-noinfo

{"id": "CVE-2015-4773", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2015-07-16T11:01:03.680", "references": [{"url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html", "tags": ["Patch", "Vendor Advisory"], "source": "secalert_us@oracle.com"}, {"url": "http://www.securitytracker.com/id/1032924", "source": "secalert_us@oracle.com"}, {"url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securitytracker.com/id/1032924", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the Hyperion Common Security component in Oracle Hyperion 11.1.2.2, 11.1.2.3, and 11.1.2.4 allows remote authenticated users to affect availability via unknown vectors related to User Account Update."}, {"lang": "es", "value": "Vulnerabilidad no especificada en el componente Hyperion Common Security en Oracle Hyperion 11.1.2.2, 11.1.2.3 y 11.1.2.4, permite a usuarios remotos autenticados afectar la disponibilidad a trav\u00e9s de vectores desconocidos relacionados con la actualizaci\u00f3n de la cuenta de usuario."}], "lastModified": "2024-11-21T02:31:43.390", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:oracle:hyperion:11.1.2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "74DA49AC-B255-470A-839D-210EA929AB96"}, {"criteria": "cpe:2.3:a:oracle:hyperion:11.1.2.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9D31D1BC-B017-4464-A0E3-84C2F20887C3"}, {"criteria": "cpe:2.3:a:oracle:hyperion:11.1.2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2B9E9D1B-B404-4BA7-96FB-C53C8B6EE5C1"}], "operator": "OR"}]}], "sourceIdentifier": "secalert_us@oracle.com"}