CVE-2020-14770 is a low-severity vulnerability affecting Oracle Hyperion BI+ (specifically version 11.1.2.4, component IQR-Foundation service). It allows a highly privileged attacker with network access to gain unauthorized read access to a subset of Hyperion BI+ data. Exploitation is difficult, requires human interaction from a non-attacker, and has a CVSS 3.1 score of 2.0. There is no known exploit code, active exploitation, or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
11.1.2.4CPE matchmatch criteria | cpe:2.3:a:oracle:hyperion_bi\+:11.1.2.4:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.0 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.