Vulnerability in Oracle Business Intelligence Enterprise Edition by Oracle

CVE-2022-21492

Summary

An exploitable vulnerability exists in the Oracle Business Intelligence Enterprise Edition, which is part of Oracle Fusion Middleware. This issue allows an unauthenticated attacker with network access via HTTP to compromise the system. Although the vulnerability demands human interaction from an individual other than the attacker, its implications extend beyond the affected product and could impact other components. Successful exploitation could lead to unauthorized actions such as updating, inserting, or deleting data, as well as unauthorized reading of certain accessible data within the system.

References