Vulnerability in Oracle Business Intelligence Enterprise Edition by Oracle

CVE-2023-22082

Summary

An exploitable vulnerability in Oracle Business Intelligence Enterprise Edition's Pod Admin component allows an attacker with low privileges and network access to compromise sensitive data. This vulnerability necessitates human interaction to initiate an attack but can lead to unauthorized updates, inserts, or deletions of data. Additionally, there is potential for unauthorized read access to certain data subsets, jeopardizing data privacy and integrity across Oracle's analytics services. The implications of this vulnerability are substantial, potentially affecting multiple products within the ecosystem.

References