nvd-json-data-feeds/CVE-2014/CVE-2014-42xx/CVE-2014-4206.json

{
  "id": "CVE-2014-4206",
  "sourceIdentifier": "secalert_us@oracle.com",
  "published": "2014-07-17T05:10:15.560",
  "lastModified": "2018-10-09T19:47:38.483",
  "vulnStatus": "Modified",
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in the Hyperion Enterprise Performance Management Architect component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows local users to affect integrity and availability via unknown vectors related to Data Synchronizer."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad no especificada en el componente Hyperion Enterprise Performance Management Architect en Oracle Hyperion 11.1.2.2 y 11.1.2.3 permite a usuarios locales afectar la integridad y disponibilidad a trav\u00e9s de vectores desconocidos relacionados con Data Synchronizer."
    }
  ],
  "metrics": {
    "cvssMetricV2": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "2.0",
          "vectorString": "AV:L/AC:M/Au:N/C:N/I:P/A:P",
          "accessVector": "LOCAL",
          "accessComplexity": "MEDIUM",
          "authentication": "NONE",
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "availabilityImpact": "PARTIAL",
          "baseScore": 3.3
        },
        "baseSeverity": "LOW",
        "exploitabilityScore": 3.4,
        "impactScore": 4.9,
        "acInsufInfo": false,
        "obtainAllPrivilege": false,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "weaknesses": [
    {
      "source": "nvd@nist.gov",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:oracle:hyperion:11.1.2.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "74DA49AC-B255-470A-839D-210EA929AB96"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:oracle:hyperion:11.1.2.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "9D31D1BC-B017-4464-A0E3-84C2F20887C3"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "http://seclists.org/fulldisclosure/2014/Dec/23",
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html",
      "source": "secalert_us@oracle.com",
      "tags": [
        "Vendor Advisory"
      ]
    },
    {
      "url": "http://www.securityfocus.com/archive/1/534161/100/0/threaded",
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/68582",
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1030579",
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://www.vmware.com/security/advisories/VMSA-2014-0012.html",
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/94568",
      "source": "secalert_us@oracle.com"
    }
  ]
}