Oracle BI Publisher Vulnerability Affects Confidentiality, Integrity, and Availability

CVE-2024-21254

Summary

The vulnerability impacts Oracle BI Publisher, a component of Oracle Analytics, specifically within its web server capabilities. Its nature allows low-privileged attackers, with network access via HTTP, to gain unauthorized access. This easiness of exploitation can lead to a full takeover of Oracle BI Publisher, raising significant security concerns. The supported affected versions include 7.0.0.0.0, 7.6.0.0.0, and 12.2.1.4.0, underscoring the need for immediate attention from users of these products. The incident highlights crucial risks concerning the confidentiality, integrity, and availability of data managed by Oracle BI Publisher.

References