Vulnerability in Oracle BI Publisher from Oracle Fusion Middleware

CVE-2021-2051

Summary

An easily exploitable vulnerability exists in Oracle BI Publisher within the Oracle Fusion Middleware, specifically impacting various versions. This flaw permits low privileged attackers with network access via HTTP to compromise the system. Successful exploitation could lead to unauthorized access to sensitive data and enable attackers to update, insert, or delete data within Oracle BI Publisher. Furthermore, it poses a risk of partial denial of service, impacting the availability of the product. Organizations using the affected versions should take immediate action to mitigate potential threats.

References