Unauthenticated Access Vulnerability in Oracle Business Intelligence Enterprise Edition

CVE-2020-14690

Summary

A vulnerability exists in Oracle Business Intelligence Enterprise Edition that enables unauthenticated attackers with network access to exploit the system through HTTP. While this vulnerability predominantly affects the Oracle Business Intelligence Enterprise Edition, successful exploitation can lead to significant repercussions for associated systems and applications. This vulnerability requires human interaction from a third party for the attack to succeed, potentially leading to unauthorized access to sensitive data, as well as the ability to perform unauthorized updates, inserts, or deletions on data within the Oracle Business Intelligence framework.

References