Vulnerability in Oracle Business Intelligence Enterprise Edition's Visual Analyzer Component

CVE-2023-22061

Summary

Oracle Business Intelligence Enterprise Edition's Visual Analyzer component has a vulnerability that permits low-privileged attackers with network access to compromise the system. Successfully exploiting this vulnerability requires user interaction from a person other than the attacker. A successful exploit may lead to unauthorized access for reading, updating, inserting, or deleting sensitive data, thereby impacting not only the Oracle Business Intelligence Enterprise Edition but also potentially extending to additional products. Users should prioritize applying available patches to mitigate the risks associated with this exposure.

References