CVE-2019-2959

CVE-2019-2959 is a vulnerability in the Security Models component of Oracle Hyperion Financial Reporting, affecting version 11.1.2.4. This difficult-to-exploit vulnerability allows a high-privileged attacker with network access via HTTP to compromise the system, requiring human interaction from a non-attacker. Successful exploitation can lead to unauthorized modification or deletion of critical data within Hyperion Financial Reporting. The vulnerability has a CVSS 3.0 Base Score of 4.2 (Medium), indicating a moderate integrity impact. While network-accessible, its high attack complexity and the requirement for user interaction reduce its overall severity. There is no known exploit code available in Metasploit or ExploitDB, and it is not listed in the CISA KEV catalog. Community discussion and media coverage for CVE-2019-2959 are minimal, with no mentions or articles found. This suggests a low level of public awareness and no indication of active exploitation. The EPSS score is also very low, further supporting the assessment of limited real-world risk.