CVE-2020-14560

MEDIUM Year: 2020
CVSS v3 Score
4.2
Medium
CVSS v2 Score
2.1
Low
Weakness Type
NVD-CWE-Other
View all →

Vulnerability Description

Vulnerability in the Oracle Hyperion BI+ product of Oracle Hyperion (component: UI and Visualization). The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion BI+. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion BI+ accessible data. CVSS 3.1 Base Score 4.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N).

Related Vulnerabilities

CVE-2017-0066

MEDIUM
CVSS:4.2(Medium)

Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka "Microsoft Edge Security Feature Bypass Vulnerability." This vulnerability is di...

NVD-CWE-Other2017

CVE-2017-0135

MEDIUM
CVSS:4.2(Medium)

Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka "Microsoft Edge Security Feature Bypass Vulnerability." This vulnerability is di...

NVD-CWE-Other2017

CVE-2017-0140

MEDIUM
CVSS:4.2(Medium)

Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka "Microsoft Edge Security Feature Bypass Vulnerability." This vulnerability is di...

NVD-CWE-Other2017

CVE-2017-13675

MEDIUM
CVSS:4.2(Medium)

A denial of service (DoS) attack in Symantec Endpoint Encryption before SEE 11.1.3HF2 allows remote attackers to make a particular machine or network resource unavailable to its intended users by temp...

NVD-CWE-Other2017

CVE-2017-13679

MEDIUM
CVSS:4.2(Medium)

A denial of service (DoS) attack in Symantec Encryption Desktop before SED 10.4.1 MP2HF1 allows remote attackers to make a particular machine or network resource unavailable to its intended users by t...

NVD-CWE-Other2017

CVE-2017-18808

MEDIUM
CVSS:4.2(Medium)

NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by incorrect configuration of security settings.

NVD-CWE-Other2017