Vulnerability Details : CVE-2015-2572
Unspecified vulnerability in the Oracle Hyperion Smart View for Office component in Oracle Hyperion 11.1.2.5.216 and earlier, when running on Windows, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core.
Products affected by CVE-2015-2572
- cpe:2.3:a:oracle:hyperion_smart_view_for_office:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2015-2572
0.04%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 15 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2015-2572
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.6
|
MEDIUM | AV:L/AC:L/Au:N/C:P/I:P/A:P |
3.9
|
6.4
|
NIST |
References for CVE-2015-2572
-
http://www.securitytracker.com/id/1032123
Oracle Hyperion Flaws Let Remote Users Partially Modify Data and Local Users Partially Access Data, Modify Data, and Deny Service - SecurityTrackerThird Party Advisory;VDB Entry
-
http://www.securityfocus.com/bid/74071
Oracle Hyperion Smart View for Office CVE-2015-2572 Local Security VulnerabilityThird Party Advisory;VDB Entry
-
https://www.exploit-db.com/exploits/36783/
Oracle Hyperion Smart View for Office 11.1.2.3.000 - Crash (PoC)Exploit
-
http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html
Oracle Critical Patch Update - April 2015Patch;Vendor Advisory
-
http://packetstormsecurity.com/files/131507/Oracle-Hyperion-Smart-View-For-Office-11.1.2.3.000-DoS.html
Oracle Hyperion Smart View For Office 11.1.2.3.000 DoS ≈ Packet StormExploit;Third Party Advisory;VDB Entry
Jump to