Unauthenticated Access Vulnerability in Oracle Fusion Middleware BI Platform Security

CVE-2020-2531

What is CVE-2020-2531?

This vulnerability affects Oracle Business Intelligence Enterprise Edition, specifically within the BI Platform Security component of Oracle Fusion Middleware. An unauthenticated attacker with HTTP network access could exploit this vulnerability to gain unauthorized read access to certain data within the Oracle Business Intelligence system. Notably, successful exploitation requires human interaction from a different user, which can increase the complexity of an attack. The affected versions include 12.2.1.3.0 and 12.2.1.4.0, and organizations using these versions should take immediate steps to mitigate potential risks.

References