High WID-SEC-2025-0817 3 CVEs

Oracle Hyperion: Mehrere Schwachstellen

Published Apr 15, 2025 · Updated Apr 15, 2025 · de-DE

Vendor: Oracle Product: Hyperion Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Hyperion ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Product

Oracle Hyperion bietet Lösungen für Business Intelligence, Planung und Konsolidierung.

Vulnerabilities 3

Medium 5.7

CVE-2025-30737

Vulnerability in the Oracle Smart View for Office product of Oracle Hyperion (component: Core Smart View). The supporte…

Oracle Oracle Smart View for Office

Apr 15, 2025
Medium 4.3

CVE-2024-47554

Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader

Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input. This issue affects Apache Commons IO: from 2.0 before …

Apache Software Foundation Apache Commons IO druid kserve-storage-controller Debian Ubuntu Azure Linux Wolfi Maven

Oct 3, 2024
Low 3.4

CVE-2024-11053

netrc and redirect credential leak

When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that …

curl curl mysql curl Debian Ubuntu Azure Linux Alpine Wolfi

Dec 11, 2024

Revision history

2025-04-15 #1
Initiale Fassung

References

Oracle Critical Patch Update Advisory - April 2025 - Appendix Oracle Hyperion vom 2025-04-15
https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixHYP