Vulnerability in Oracle BI Publisher by Oracle

CVE-2025-30723

What is CVE-2025-30723?

A vulnerability exists in Oracle BI Publisher within the Oracle Analytics framework, specifically affecting versions 7.6.0.0.0 and 12.2.1.4.0. This weakness allows a low-privileged attacker with network access via HTTP to exploit the system. Successful attacks can compromise the integrity of accessible data by enabling unauthorized updates, inserts, or deletions. Furthermore, it may allow attackers to initiate a partial denial of service, potentially disrupting the availability of the service. Users of impacted versions are advised to implement appropriate security measures promptly.

References