Vulnerability in Oracle BI Publisher Affects Oracle Fusion Middleware

CVE-2022-21590

Summary

This vulnerability in Oracle BI Publisher, part of Oracle Fusion Middleware’s Core Formatting API, permits low-privileged attackers with network access to exploit it through HTTP. A successful exploit can lead to unauthorized access to sensitive data, allowing attackers to view, update, insert, or delete information within Oracle BI Publisher. Additionally, the vulnerability poses the risk of a partial denial of service, compromising the availability of the service. It is crucial for users running the affected versions to apply security updates promptly to safeguard their data integrity and confidentiality.

References