CVE-2016-3493 is a critical, unspecified vulnerability in the Oracle Hyperion Financial Reporting component (version 11.1.2.4) that allows remote attackers to compromise the confidentiality, integrity, and availability of affected systems through issues related to Security Models. With a CVSS score of 9.8, this vulnerability is easily exploitable over the network with low attack complexity and no user interaction required, leading to complete compromise of the system. While there is no known active exploitation or public exploit code available, the vulnerability has garnered significant community discussion, indicating awareness and potential interest. Despite its age, its high FAUCET Risk Score of 94/100 suggests it remains a significant threat.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
11.1.2.4CPE matchmatch criteria | cpe:2.3:a:oracle:hyperion_financial_reporting:11.1.2.4:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.