CVE-2012-3133

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-12-21 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in the DataDirect ODBC driver, as used in Oracle Hyperion Interactive Reporting 11.1.2.1 and 11.1.2.2, Essbase Server 11.1.2.1 and 11.1.2.2, Production Reporting Server 11.1.2.1 and 11.1.2.2, and Integration Services Server 11.1.2.1 and 11.1.2.2 has unknown impact and attack vectors.

Affected products

Oracle Essbase Server: 11.1.2.1, 11.1.2.2
Oracle Hyperion Interactive Reporting: 11.1.2.1, 11.1.2.2
Oracle Hyperion Production Reporting Server: 11.1.2.1, 11.1.2.2
Oracle Integration Services Server: 11.1.2.1, 11.1.2.2

References

https://blogs.oracle.com/sunsecurity/entry/cve_2012_3133_buffer_overflow
https://blogs.oracle.com/sunsecurity/entry/cve_2012_3133_buffer_overflow

Get alerted when CVE-2012-3133 or the next vulnerability affects your stack