CVE-2015-2572

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 1.1%

from disclosure to weapon1 days

Published on NVDApr 16

1st PoC+1d

exploitation probability

1.1%top 39% of all CVEs

observed exploitation

nono source reports it

3 public exploit(s)

Unspecified vulnerability in the Oracle Hyperion Smart View for Office component in Oracle Hyperion 11.1.2.5.216 and earlier, when running on Windows, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core.

Affected products

n/a · n/a

public PoCs found — 3

exploitdbwww.exploit-db.com/exploits/36783unverified cve_referencepacketstormsecurity.com/files/131507/Oracle-Hyperion-Smart-View-For-Office-11.1.2.3.000-DoS.htmlunverified cve_referencewww.exploit-db.com/exploits/36783/unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://packetstormsecurity.com/files/131507/Oracle-Hyperion-Smart-View-For-Office-11.1.2.3.000-DoS.html https://www.exploit-db.com/exploits/36783/http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html http://www.osvdb.org/120680 http://www.securityfocus.com/bid/74071 http://www.securitytracker.com/id/1032123