Unauthorized Data Access in Oracle BI Publisher by Oracle

CVE-2021-2050

Summary

A vulnerability exists in the Oracle BI Publisher component of Oracle Fusion Middleware that allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation of this flaw can lead to unauthorized access to sensitive data, complete control over accessible information within Oracle BI Publisher, and unauthorized modifications—including updates, insertions, or deletions—to the data. Furthermore, this vulnerability can potentially facilitate a partial denial of service, disrupting the availability of Oracle BI Publisher for legitimate users.

References