Vulnerability in Oracle Business Intelligence Enterprise Edition by Oracle

CVE-2022-21419

What is CVE-2022-21419?

A security flaw in Oracle Business Intelligence Enterprise Edition enables an unauthenticated attacker with network access to compromise the system. Exploitation of this vulnerability may require human interaction from an individual other than the attacker, leading to the potential for unauthorized updates, inserts, or deletions of accessible data. Additionally, the impacts may extend beyond Oracle Business Intelligence Enterprise Edition to other products. The vulnerability specifically affects versions 5.5.0.0.0 and 5.9.0.0.0, allowing attackers to gain unauthorized read access to certain data.

References