Unauthorized Access Vulnerability in Oracle Business Intelligence Enterprise Edition by Oracle

CVE-2020-2535

What is CVE-2020-2535?

This security vulnerability in Oracle Business Intelligence Enterprise Edition allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to sensitive data. The attack requires human interaction from a person other than the attacker, potentially allowing for significant impacts on associated products. Systems running affected versions, such as 12.2.1.3.0 and 12.2.1.4.0, should be assessed for exposure to ensure data integrity and confidentiality.

References