Unauthorized Access Vulnerability in Oracle Business Intelligence Enterprise Edition

CVE-2020-14609

Summary

An improper access control vulnerability in Oracle Business Intelligence Enterprise Edition allows an unauthenticated attacker with HTTP network access to exploit the system. Affected versions enable remote attackers to obtain unauthorized access to sensitive data, perform unapproved updates, inserts, or deletions of data, and potentially lead to a partial denial of service. Organizations utilizing these versions should take immediate action to secure their environments and patch vulnerable deployments.

References