CVE-2018-3142

🗓️ 17 Oct 2018 01:00:00Reported by oracleType

Vulnerability in the Hyperion Essbase Administration Services component of Oracle Hyperion (subcomponent: EAS Console). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Hyperion Essbase Administration Services. While the vulnerability is in Hyperion Essbase Administration Services, attacks may significantly impact additional products

Reporter	Title	Published	Views	Family All 9
BDU FSTEC	The vulnerability of the EAS Console component of the Oracle Hyperion Essbase Administration Services allows a intruder to gain unauthorized access to protected data.	28 Jan 201900:00	–	bdu_fstec
CNVD	Unspecified Vulnerability in Oracle Hyperion Essbase Administration Services	17 Oct 201800:00	–	cnvd
Cvelist	CVE-2018-3142	17 Oct 201801:00	–	cvelist
EUVD	EUVD-2018-14997	7 Oct 202500:30	–	euvd
NVD	CVE-2018-3142	17 Oct 201801:31	–	nvd
Oracle	Oracle Critical Patch Update - October 2018	18 Dec 201800:00	–	oracle
OSV	CVE-2018-3142	17 Oct 201801:31	–	osv
Prion	Design/Logic Flaw	17 Oct 201801:31	–	prion
Vulnrichment	CVE-2018-3142	17 Oct 201801:00	–	vulnrichment

NVD

Vulners

Node

oracle hyperionMatch11.1.2.4

[
  {
    "product": "Hyperion Essbase Administration Services",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "11.1.2.4"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/105641
securitytracker	www.securitytracker.com/id/1041898
oracle	www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html

17 Jun 2026 01:57Current

7.2High risk

Vulners AI Score7.2

CVSS 24

CVSS 37.7

EPSS0.02019

SSVC