Exploitable Vulnerability in Oracle Business Intelligence's Analytics Server
CVE-2023-21952
Key Information:
- Vendor
Oracle
- Vendor
- CVE Published:
- 18 April 2023
What is CVE-2023-21952?
A vulnerability exists within Oracle Business Intelligence Enterprise Edition's Analytics Server that permits a low-privileged attacker with network access via HTTP to gain unauthorized access to sensitive data. This vulnerability requires interaction from an individual other than the attacker for successful exploitation. Successful attacks could potentially lead to full access to all data accessible within Oracle Business Intelligence Enterprise Edition, thereby posing a serious risk to data confidentiality.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Business Intelligence Enterprise Edition 6.4.0.0.0
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved