Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2012-3133

Buffer overflow in the DataDirect ODBC driver, as used in Oracle Hyperion Interactive Reporting 11.1.2.1 and 11.1.2.2, Essbase Server 11.1.2.1 and 11.1.2.2, Production Reporting Server 11.1.2.1 and 11.1.2.2, and Integration Services Server 11.1.2.1 and 11.1.2.2 has unknown impact and attack vectors.

Published

2012-12-21T05:46:15.980

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 6.8 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

8.6

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-119
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application oracle hyperion_interactive_reporting 11.1.2.1 Yes
Application oracle hyperion_interactive_reporting 11.1.2.2 Yes
Application oracle essbase_server 11.1.2.1 Yes
Application oracle essbase_server 11.1.2.2 Yes
Application oracle hyperion_production_reporting_server 11.1.2.1 Yes
Application oracle hyperion_production_reporting_server 11.1.2.2 Yes
Application oracle integration_services_server 11.1.2.1 Yes
Application oracle integration_services_server 11.1.2.2 Yes
References