Oracle Business Intelligence Enterprise Edition Vulnerability in Analytics Web General
CVE-2023-21910
Key Information:
- Vendor
Oracle
- Vendor
- CVE Published:
- 18 April 2023
What is CVE-2023-21910?
A vulnerability exists in the Oracle Business Intelligence Enterprise Edition's Analytics Web component that allows a low-privileged attacker with HTTP network access to manipulate system functionalities. This flaw could lead to unauthorized access to sensitive data, granting attackers potential control over all accessible information within the affected Oracle Business Intelligence versions 6.4.0.0.0 and 12.2.1.4.0. Users are encouraged to assess their exposure and apply necessary security measures to safeguard their data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Business Intelligence Enterprise Edition 6.4.0.0.0
Business Intelligence Enterprise Edition 12.2.1.4.0
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved