Security Vulnerability in Oracle BI Publisher of Oracle Analytics

CVE-2023-21970

What is CVE-2023-21970?

A vulnerability exists in the Oracle BI Publisher component of Oracle Analytics that can be exploited by a low privileged attacker with network access via HTTP. This vulnerability allows unauthorized access to sensitive data and could lead to complete access to all data accessible through Oracle BI Publisher. Successful exploitation requires human interaction from an individual other than the attacker, raising concerns about data confidentiality and access control. Organizations must take precautionary measures to mitigate such risks and protect sensitive information.

References