Oracle BI Publisher Unauthenticated Data Access Vulnerability

A vulnerability exists in Oracle BI Publisher, part of Oracle Analytics, specifically in the XML Services component. It affects versions 7.6.0.0.0 and 12.2.1.4.0. This vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle BI Publisher. Exploitation of this vulnerability could lead to unauthorized access to critical data or complete access to all data accessible through Oracle BI Publisher.

Impact

Successful exploitation allows unauthorized access to critical data or complete access to all data in Oracle BI Publisher that is accessible to the user.