Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2743▼ 518 respecto a la semana anterior

Críticas / altas1293▼ 226 respecto a la semana anterior

Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)244▼ 258 respecto a la semana anterior

481 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2012-3133	Modificada	Media (6.8)	1.1%	—	Oracle Hyperion Interactive Reporting Oracle Essbase Server Oracle Hyperion Production Reporting Server Oracle Integration Services Server	21/12/2012	16/6/2026	Buffer overflow in the DataDirect ODBC driver, as used in Oracle Hyperion Interactive Reporting 11.1.2.1 and 11.1.2.2, Essbase Server 11.1.2.1 and 11.1.2.2, Production Reporting Server 11.1.2.1 and 11.1.2.2, and Integration Services Server 11.1.2.1 and 11.1.2.2 has unknown impact and attack vectors.
CVE-2012-1714	Modificada	Alta (10)	3.6%	—	Oracle Hyperion Financial Management	21/12/2012	16/6/2026	Unspecified vulnerability in a TList 6 ActiveX control in Oracle Hyperion Financial Management 11.1.1.4 and 11.1.2.1.104 allows remote attackers to execute arbitrary code via unknown vectors.
CVE-2011-5167	Modificada	Alta (9.3)	9.8%	💥 Exploit	Oracle Hyperion Strategic Finance Tidestone Formula ONE Activex Control	15/9/2012	16/6/2026	Heap-based buffer overflow in the SetDevNames method of the Tidestone Formula One ActiveX control (TTF16.ocx) 6.3.5 Build 1 in Oracle Hyperion Strategic Finance 12.x and possibly earlier allows remote attackers to execute arbitrary code via a long string to the DriverName parameter.
CVE-2012-1729	Modificada	Media (4.3)	1.4%	—	Oracle Hyperion	17/7/2012	16/6/2026	Unspecified vulnerability in the Hyperion BI+ component in Oracle Hyperion 11.1.1.3 and earlier allows remote attackers to affect integrity via unknown vectors related to UI and Visualization.
CVE-2008-2612	Modificada	Media (4.3)	1.1%	—	Oracle Hyperion BI Plus Component Oracle Application Server	15/7/2008	16/6/2026	Unspecified vulnerability in the Hyperion BI Plus component in Oracle Application Server 8.3.2.4, 8.5.0.3, 9.2.0.3, 9.2.1.0, and 9.3.1.0 has unknown impact and remote attack vectors.
CVE-2002-2387	Modificada	Media (5)	1.5%	—	Mollensoft Software Hyperion FTP Server	31/12/2002	16/6/2026	Directory traversal vulnerability in Hyperion FTP server 2.8.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the LS command.