Vulnerability in Oracle BI Publisher of Oracle Fusion Middleware

CVE-2021-2049

What is CVE-2021-2049?

The vulnerability in Oracle BI Publisher, part of Oracle Fusion Middleware, permits a low-privileged attacker with network access via HTTP to exploit the system. Successful exploitation may lead to unauthorized access to sensitive data and the ability to perform unauthorized operations such as updates and deletions on the accessible data in Oracle BI Publisher. Furthermore, this vulnerability can result in a Partial Denial of Service, affecting the availability of the system. It’s crucial for organizations using affected versions to apply security updates promptly to safeguard their data.

References