Oracle Hyperion Data Relationship Management vulnerabilities

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) allows an unauthenticated attacker with network access via SOAP to gain unauthorized access to data and modify it. The attack requires no user interaction.

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to data and modify it. The attack requires no user interaction.

Vulnerability in Oracle Hyperion Data Relationship Management product, component Access and security. Affected version is 11.2.25.0.000. An unauthenticated attacker can remotely compromise the system via TCP, potentially impacting other products.

Vulnerability in Oracle Hyperion Data Relationship Management product, component Access and security. Affected version is 11.2.25.0.000. A high privileged attacker can remotely compromise the system via HTTPS, potentially impacting other products.

Vulnerability in Oracle Hyperion Data Relationship Management product, component Access and security. Affected version is 11.2.25.0.000. An unauthenticated attacker can remotely compromise the system via TCP.

Vulnerability in Oracle Hyperion Data Relationship Management product, component Access and security. Affected version is 11.2.25.0.000. An unauthenticated attacker can remotely access and modify data via HTTP.

Vulnerability in Oracle Hyperion Data Relationship Management product, component Access and security. Affected version is 11.2.25.0.000. An unauthenticated attacker can remotely compromise the system via TCP.

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. An unauthenticated attacker with access to the physical communication segment can gain unauthorized access to critical data and the ability to create, delete, or modify data.

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. A low-privileged attacker with network access via HTTPS, requiring user interaction, can gain unauthorized access to critical data and the ability to create, delete, or modify data. Attacks may impact additional products (scope change).

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. A low-privileged attacker with logon to the infrastructure where the system runs can gain unauthorized access to critical data and the ability to create, delete, or modify data.

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. An unauthenticated attacker with network access via HTTP, requiring user interaction, can gain unauthorized access to critical data and the ability to create, delete, or modify data.

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. An unauthenticated attacker with network access via HTTP, under difficult conditions, can gain unauthorized access to critical data and the ability to create, delete, or modify data. Attacks may impact additional products (scope change).

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. A low-privileged attacker with network access via HTTP can take over the Oracle Hyperion Data Relationship Management system.

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. An unauthenticated attacker with network access via HTTP, under difficult conditions, can gain unauthorized access to critical data and the ability to create, delete, or modify data.

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. Easily exploitable by an unauthenticated attacker via network (HTTPS), allowing unauthorized access to critical data or complete access to all product data, as well as unauthorized update, insert, or delete of some data. CVSS 3.1 score: 8.2 (Confidentiality and Integrity impacts).

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. Easily exploitable by an unauthenticated attacker via network (HTTP), allowing unauthorized access to critical data or complete access to all product data. CVSS 3.1 score: 7.5 (Confidentiality impact).

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. A low-privileged attacker with local access can gain unauthorized access to critical data, with impact on other products.

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. Easily exploitable by an unauthenticated attacker with local logon to the infrastructure, allowing unauthorized creation, deletion, or modification of critical data and unauthorized access to them. CVSS 3.1 score: 7.7 (Confidentiality and Integrity impacts).

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. Difficult to exploit, requires low privileges and network access via SQL, may impact additional products (scope change). Allows unauthorized creation, deletion, or modification of critical data and unauthorized access to them. CVSS 3.1 score: 8.2 (Confidentiality and Integrity impacts).

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. Difficult to exploit, requires low privileges and network access via HTTP, may impact additional products (scope change). Allows unauthorized creation, deletion, or modification of critical data and unauthorized access to them. CVSS 3.1 score: 8.2 (Confidentiality and Integrity impacts).

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. Easily exploitable by an unauthenticated attacker via network (HTTP), allowing unauthorized access to critical data or complete access to all product data. CVSS 3.1 score: 7.5 (Confidentiality impact).

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. Easily exploitable by an unauthenticated attacker via network (HTTP), allowing unauthorized access to critical data or complete access to all product data. CVSS 3.1 score: 7.5 (Confidentiality impact).

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. Easily exploitable by an unauthenticated attacker via network (HTTP), allowing unauthorized access to critical data or complete access to all product data. CVSS 3.1 score: 7.5 (Confidentiality impact).

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. A high-privileged attacker over the network (HTTP), under difficult conditions, can take over the system.

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. Easily exploitable by an unauthenticated attacker via network (HTTP), allowing unauthorized access to critical data or complete access to all product data, as well as unauthorized update, insert, or delete of some data. CVSS 3.1 score: 8.2 (Confidentiality and Integrity impacts).

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. Easily exploitable by a low-privileged attacker via network (HTTP), allowing takeover of Oracle Hyperion Data Relationship Management. CVSS 3.1 score: 8.8 (Confidentiality, Integrity and Availability impacts).

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to take over the system. Attacks may impact additional products (scope change).

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. An easily exploitable flaw requires user interaction and allows a low-privileged attacker to gain unauthorized access to and modify data. Attacks may impact additional products (scope change).

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized access to and modify data.

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. A difficult-to-exploit flaw requires logon to the infrastructure and allows a low-privileged attacker to take over the system. Attacks may impact additional products (scope change).

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized access to and modify data.

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to take over the system.

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to take over the system.

Vulnerability in Oracle Hyperion Data Relationship Management (component: Access and security) version 11.2.25.0.000. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to take over the system.

Vulnerability in Oracle Hyperion Data Relationship Management (component: Web Client - Unicode) version 11.2.23.0.000. An easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to data and cause a partial denial of service.