Vulnerability in Oracle Business Intelligence Enterprise Edition by Oracle

CVE-2023-22011

What is CVE-2023-22011?

A vulnerability exists in Oracle Business Intelligence Enterprise Edition, specifically in the Analytics Server component. This flaw allows a low-privileged attacker with network access via HTTP to potentially compromise the system. Exploitation of the vulnerability could lead to unauthorized updates, inserts, or deletions of accessible data, as well as the ability to cause a partial denial of service, affecting the overall integrity and availability of the product. Enterprises using the affected versions 6.4.0.0.0 and 7.0.0.0.0 should take immediate steps to secure their applications.

References