CVE-2015-2572 json
Unspecified vulnerability in the Oracle Hyperion Smart View for Office component in Oracle Hyperion 11.1.2.5.216 and earlier, when running…
published 2015-04-16 11 y ago modified 2026-06-17 4 mo ago also EUVD-2015-2665
- cvss
- 4.6
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.1%
- EPSS 1.1% chance of exploitation in 30 days, percentile 65%
- public exploits
- 1
- Exploit-DB
Summary
Unspecified vulnerability in the Oracle Hyperion Smart View for Office component in Oracle Hyperion 11.1.2.5.216 and earlier, when running on Windows, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core.
Patch / fix
Timeline
- Published
- First public exploit (EDB-36783)
Exploit prediction
1.07% chance of exploitation in the next 30 days, higher than 65% of all scored CVEs (FIRST EPSS, 2026-11-09).
Exploits and checks
- EDB-36783 Oracle Hyperion Smart View for Office 11.1.2.3.000 - Crash (PoC) dos, 2015-04-17
- packetstormsecurity.com http://packetstormsecurity.com/files/131507/Oracle-Hyperion-Smart-View-For-Office-11.1.2.3.000-DoS.html referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 4.6 | AV:L/AC:L/Au:N/C:P/I:P/A:P |
References
-
oracle.com
/technetwork/topics/security/cpuapr2015-2365600.html
patch, vendor-advisory
-
exploit-db.com
/exploits/36783/
exploit
-
packetstormsecurity.com
/files/131507/Oracle-Hyperion-Smart-View-For-Office-11.1.2.3.000-DoS.html
exploit, third-party-advisory, vdb-entry
-
securitytracker.com
/id/1032123
vdb-entry, third-party-advisory
-
securityfocus.com
/bid/74071
vdb-entry, third-party-advisory
-
osvdb.org
/120680
vdb-entry
Sources
- CVE List CVE-2015-2572
- NVD CVE-2015-2572
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.