{"api_version":"1","generated_at":"2026-07-23T06:31:22+00:00","cve":"CVE-2014-0367","urls":{"html":"https://cve.report/CVE-2014-0367","api":"https://cve.report/api/cve/CVE-2014-0367.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2014-0367","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2014-0367"},"summary":{"title":"CVE-2014-0367","description":"Unspecified vulnerability in the Hyperion Essbase Administration Services component in Oracle Hyperion 11.1.2.1, 11.1.2.2, and 11.1.2.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Admin Console.","state":"PUBLISHED","assigner":"oracle","published_at":"2014-01-15 16:08:06","updated_at":"2026-04-29 01:13:23"},"problem_types":["NVD-CWE-noinfo","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"5.5","severity":"","vector":"AV:N/AC:L/Au:S/C:P/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html","name":"http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Oracle Critical Patch Update - January 2014","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/56469","name":"http://secunia.com/advisories/56469","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Security Advisory SA56469 - Oracle Hyperion Essbase Administration Services Information Disclosure and Data Manipulation Vulnerability - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/64814","name":"http://www.securityfocus.com/bid/64814","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Oracle Hyperion Essbase Administration Services CVE-2014-0367 Remote Security Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.securityfocus.com/bid/64758","name":"http://www.securityfocus.com/bid/64758","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"RETIRED: Oracle January 2014 Critical Patch Update Multiple Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://osvdb.org/102114","name":"http://osvdb.org/102114","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0367","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0367","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2014","cve_id":"367","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"hyperion","cpe6":"11.1.2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"367","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"hyperion","cpe6":"11.1.2.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"367","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"hyperion","cpe6":"11.1.2.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2014","cve_id":"367","cve":"CVE-2014-0367","epss":"0.002620000","percentile":"0.495240000","score_date":"2026-05-01","updated_at":"2026-05-02 00:02:52"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T09:13:10.413Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"56469","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/56469"},{"name":"102114","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/102114"},{"name":"64814","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/64814"},{"name":"64758","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/64758"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2014-01-14T00:00:00.000Z","descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Hyperion Essbase Administration Services component in Oracle Hyperion 11.1.2.1, 11.1.2.2, and 11.1.2.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Admin Console."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2014-01-30T23:57:02.000Z","orgId":"43595867-4340-4103-b7a2-9a5208d29a85","shortName":"oracle"},"references":[{"name":"56469","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/56469"},{"name":"102114","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/102114"},{"name":"64814","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/64814"},{"name":"64758","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/64758"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secalert_us@oracle.com","ID":"CVE-2014-0367","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Unspecified vulnerability in the Hyperion Essbase Administration Services component in Oracle Hyperion 11.1.2.1, 11.1.2.2, and 11.1.2.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Admin Console."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"56469","refsource":"SECUNIA","url":"http://secunia.com/advisories/56469"},{"name":"102114","refsource":"OSVDB","url":"http://osvdb.org/102114"},{"name":"64814","refsource":"BID","url":"http://www.securityfocus.com/bid/64814"},{"name":"64758","refsource":"BID","url":"http://www.securityfocus.com/bid/64758"},{"name":"http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html","refsource":"CONFIRM","url":"http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"}]}}}},"cveMetadata":{"assignerOrgId":"43595867-4340-4103-b7a2-9a5208d29a85","assignerShortName":"oracle","cveId":"CVE-2014-0367","datePublished":"2014-01-15T01:33:00.000Z","dateReserved":"2013-12-12T00:00:00.000Z","dateUpdated":"2024-08-06T09:13:10.413Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2014-01-15 16:08:06","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["NVD-CWE-noinfo","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:hyperion:11.1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D04B1742-6E82-492F-B73A-61B8DF133A51"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:hyperion:11.1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"74DA49AC-B255-470A-839D-210EA929AB96"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:hyperion:11.1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"9D31D1BC-B017-4464-A0E3-84C2F20887C3"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2014","CveId":"367","Ordinal":"1","Title":"CVE-2014-0367","CVE":"CVE-2014-0367","Year":"2014"},"notes":[{"CveYear":"2014","CveId":"367","Ordinal":"1","NoteData":"Unspecified vulnerability in the Hyperion Essbase Administration Services component in Oracle Hyperion 11.1.2.1, 11.1.2.2, and 11.1.2.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Admin Console.","Type":"Description","Title":"CVE-2014-0367"},{"CveYear":"2014","CveId":"367","Ordinal":"2","NoteData":"2014-01-14","Type":"Other","Title":"Published"},{"CveYear":"2014","CveId":"367","Ordinal":"3","NoteData":"2014-01-30","Type":"Other","Title":"Modified"}]}}}