Exploitable Vulnerability in Oracle Business Intelligence Enterprise Edition

CVE-2023-22109

What is CVE-2023-22109?

This vulnerability in Oracle Business Intelligence Enterprise Edition allows a low-privileged attacker with network access via HTTP to compromise sensitive data through web dashboards. The exploitation requires human interaction from a person other than the attacker, increasing the complexity of the attack. Successful exploitation can lead to unauthorized updates, insertions, deletions, and readings of accessible data, thereby jeopardizing both data confidentiality and integrity.

References