Lucene search
K

CVE-2018-3184

🗓️ 17 Oct 2018 01:00:00Reported by oracleType 
cve
 cve
🔗 web.nvd.nist.gov👁 48 Views🌐 WEB

Vulnerability in Oracle Hyperion BI+, version 11.1.2.4, allows high privileged attacker to compromise data via HTTP

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
0day.today
Oracle Hyperion Planning 11.1.2.4 Cross Site Scripting Vulnerability
26 Oct 201800:00
zdt
CNVD
Unspecified Vulnerability in Oracle Hyperion BI+ Component (CNVD-2019-39883)
19 Oct 201800:00
cnvd
Cvelist
CVE-2018-3184
17 Oct 201801:00
cvelist
EUVD
EUVD-2018-15039
7 Oct 202500:30
euvd
NVD
CVE-2018-3184
17 Oct 201801:31
nvd
Oracle
Oracle Critical Patch Update - October 2018
18 Dec 201800:00
oracle
Packet Storm
Oracle Hyperion Planning 11.1.2.4 Cross Site Scripting
26 Oct 201800:00
packetstorm
Prion
Design/Logic Flaw
17 Oct 201801:31
prion
Vulnrichment
CVE-2018-3184
17 Oct 201801:00
vulnrichment
NVD
Vulners
Node
oraclehyperion_bi+Match11.1.2.4
[
  {
    "product": "Hyperion BI+",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "11.1.2.4"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
destquery paramraframework/browse/editFileACL?dest=0000016f77a61591-1111-3dfd-c9ao0p1b&tempPersistIdFN=1525";</script><script>alert(/hasan/)</script>Cross-site scripting PoC in Oracle Hyperion Planning 11.1.2.4 allowing injected script execution via crafted query parameters.CWE-79
tempPersistIdFNquery paramraframework/browse/editFileACL?dest=0000016f77a61591-1111-3dfd-c9ao0p1b&tempPersistIdFN=1525";</script><script>alert(/hasan/)</script>Cross-site scripting PoC in Oracle Hyperion Planning 11.1.2.4 allowing injected script execution via crafted query parameters.CWE-79

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 04:05Current
2.5Low risk
Vulners AI Score2.5
CVSS 32.4
CVSS 23.5
EPSS0.00249
SSVC
48