PT-2014-5759

Name of the Vulnerable Software and Affected Versions Oracle Hyperion versions 11.1.2.2 through 11.1.2.3 Description The issue affects confidentiality and can be exploited by remote authenticated users through vectors related to SVP in the Hyperion Analytic Provider Services component...

PT-2014-3628

Name of the Vulnerable Software and Affected Versions Oracle Hyperion versions 11.1.2.2 through 11.1.2.3 Description The issue affects the integrity of the system, allowing remote attackers to exploit it via unknown vectors related to Web Analysis in the Hyperion BI+ component. Recommendations Fo...

PT-2014-5736

Name of the Vulnerable Software and Affected Versions Oracle Hyperion versions 11.1.2.2 through 11.1.2.3 Description The issue affects the integrity and availability of the system, allowing local users to exploit it via unknown vectors related to Data Synchronizer. Recommendations For versions...

PT-2014-5733

Name of the Vulnerable Software and Affected Versions Oracle Hyperion versions 11.1.2.2 through 11.1.2.3 Description The issue affects confidentiality, integrity, and availability. It is related to Property Editing in the Hyperion Enterprise Performance Management Architect component...

CVE-2014-4246: Undefined Security Weakness

Unspecified vulnerability in the Hyperion Analytic Provider Services component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote authenticated users to affect confidentiality via vectors related to SVP...

PT-2014-5770

Name of the Vulnerable Software and Affected Versions Oracle Hyperion versions 11.1.2.2 through 11.1.2.3 Description The issue affects the availability of the system, allowing remote attackers to exploit it via unknown vectors related to the Agent component in the Hyperion Essbase. Recommendation...

Oracle Releases July 2014 Security Advisory

Oracle has released its Critical Patch Update for July 2014 to address 113 vulnerabilities across multiple products. This update contains the following security fixes: 5 for Oracle Database Server 29 for Oracle Fusion Middleware 7 for Oracle Hyperion 1 for Oracle Enterprise Manager Grid Control 5...

Oracle July 2014 Critical Patch Update

Never one to skimp on patches, Oracle is expected to release 113 of them tomorrow as part of its quarterly Critical Patch Update. The company also clarified that Java 7 versions will continue to work on the end-of-life Microsoft Windows XP platform and Oracle security updates for Java on XP...

Oracle Hyperion 11 - Directory Traversal

No description provided by source...

Oracle DataDirect Multiple Native Wire Protocol ODBC Drivers HOST Attribute Stack Based Buffer Overflow

No description provided by source. Oracle DataDirect Multiple Native Wire Protocol ODBC Drivers HOST Attribute Stack Based Buffer Overflow Vulnerability tested against: Microsoft Windows 2k3 r2 sp2 Oracle Hyperion Performance Management and BI v11.1.2.1.0 download url of the Oracle Hyperion suite...

Oracle DataDirect ODBC Drivers HOST Attribute arsqls24.dll Stack Based Buffer Overflow PoC

No description provided by source. ?php / Oracle DataDirect ODBC Drivers HOST Attribute arsqls24.dll Stack Based Buffer Overflow PoC .oce by rgod found a local vector for this: http://retrogod.altervista.org/9sgoracledatadirect.htm http://www.exploit-db.com/exploits/18007/ This poc will create a...

Oracle Hyperion Financial Management TList6 ActiveX Control Remote Code Execution

No description provided by source...

Oracle Hyperion Strategic Finance 12.x Tidestone Formula One WorkBook OLE Control TTF16.ocx Remote Heap Overflow

No description provided by source. !-- Oracle Hyperion Strategic Finance Client 12.x Tidestone Formula One WorkBook OLE Control TTF16 6.3.5 Build 1 SetDevNames Remote Heap Overflow poc 99% stable,IE-no-dep. I think this control can be carried by other products, however 6.1 seems not vulnerable A...

CVE-2014-2454

Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect confidentiality via unknown vectors related to User Interface...

CVE-2014-2453

Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect integrity via unknown vectors related to User Interface...

CVE-2014-2455

Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to User Interface...

Design/Logic Flaw

Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to User Interface...

Design/Logic Flaw

Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect integrity via unknown vectors related to User Interface...

Design/Logic Flaw

Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect confidentiality via unknown vectors related to User Interface...

CVE-2014-2453

Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect integrity via unknown vectors related to User Interface...