High WID-SEC-2024-3190 3 CVEs

Oracle Hyperion: Mehrere Schwachstellen

Published Oct 15, 2024 · Updated Oct 15, 2024 · de-DE

Vendor: Oracle Product: Hyperion

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Hyperion ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Product

Oracle Hyperion bietet Lösungen für Business Intelligence, Planung und Konsolidierung.

Vulnerabilities 3

High 8.1

CVE-2024-23807

Apache Xerces C++: Use-after-free on external DTD scan

The Apache Xerces C++ XML parser on versions 3.0.0 before 3.2.5 contains a use-after-free error triggered during the scanning of external DTDs. Users are recommended to upgrade to version 3.2.5 which fixes the issue, or mitigate the issue by disabling DTD pro…

Apache Software Foundation Apache Xerces C++ xerces-c xerces-c Ubuntu Azure Linux

Feb 28, 2024
Medium 5.5

CVE-2024-26308 Public exploit

Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file

Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.21 before 1.26. Users are recommended to upgrade to version 1.26, which fixes the issue.

Apache Software Foundation Apache Commons Compress druid trino Debian Ubuntu Wolfi Maven

Feb 19, 2024
Low 3.0

CVE-2024-21257

Vulnerability in the Oracle Hyperion BI+ product of Oracle Hyperion (component: UI and Visualization). The supported ve…

Oracle Oracle Hyperion BI+

Oct 15, 2024

Revision history

2024-10-15 #1
Initiale Fassung

References

Oracle Critical Patch Update Advisory - October 2024 - Appendix Oracle Hyperion vom 2024-10-15
https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixHYP