Oracle Fusion Middleware - BI Publisher Vulnerability

CVE-2020-14879

Summary

The BI Publisher component of Oracle Fusion Middleware contains a vulnerability that can be easily exploited by low-privileged attackers with network access via HTTP. Although specifically within BI Publisher, exploitation of this vulnerability can have far-reaching consequences, impacting not just the BI Publisher but potentially other associated products. Attackers leveraging this flaw may gain unauthorized access to sensitive data, and they might be able to perform unauthorized updates, inserts, or deletions on accessible data within BI Publisher, threatening data confidentiality and integrity.

References