Vulnerability in Oracle Business Intelligence Enterprise Edition by Oracle

CVE-2023-21861

Summary

An exploitable vulnerability exists in Oracle Business Intelligence Enterprise Edition within Oracle Fusion Middleware, specifically in the Visual Analyzer component. The flaw allows a low-privileged attacker with network access via HTTP to compromise the system. Successful exploitation requires human interaction from a third party, and while it directly affects the Business Intelligence Enterprise Edition, it can extend its impact to other connected products. Attackers exploiting this vulnerability can potentially gain unauthorized capabilities, allowing them to perform actions like updating, inserting, or deleting data, as well as unauthorized reading of certain data accessible through the platform.

References